<div style="font-family: Arial, sans-serif; font-size: 14px;">Hi again,</div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;">not quite working.</div><div style="font-family: Arial, sans-serif; font-size: 14px;">Creating a role in midPoint creates the corresponding group in LDAP.</div><div style="font-family: Arial, sans-serif; font-size: 14px;">Actually, it's not LDAP, but FreeIPA, so I'm using <span><a target="_blank" rel="noreferrer nofollow noopener" href="https://github.com/artinsolutions/midpoint-connector-freeipa/tree/master">https://github.com/artinsolutions/midpoint-connector-freeipa/tree/master</a>.</span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span><br></span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span>Assigning the role to a user, creates and/or updates FreeIPA with the membership.</span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span>So the "next step" is working fine.</span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span><br></span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span>But before I get there, it's the reverse I would like to do: </span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><ul data-editing-info="{"orderedStyleType":1,"unorderedStyleType":1}"><li style="list-style-type: disc;"><span><span>create roles for all freeipa groups: done</span></span></li><ul style="list-style-type: circle;"><li style="">I am also assigning an archetype to differentiate them from other roles</li></ul></ul></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><ul data-editing-info="{"orderedStyleType":1,"unorderedStyleType":1}"><li style="list-style-type: disc;"><span><span>assign the midPoint role(s) to all users that are member of the group</span></span></li><ul style="list-style-type: circle;"><li style="">this is not working, I'm probably missing something, but when I read everything and check the xml-files all I see is outbound. And I guess I need something inbound. And, since it's related to the user, would it mean a user object template that could do this?</li></ul></ul></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span><br></span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span>Thanks in advance</span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div>
<div class="protonmail_signature_block" style="font-family: Arial, sans-serif; font-size: 14px;">
<div class="protonmail_signature_block-user">
Markus Calmius<br>Proton AG
</div>
<div class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div class="protonmail_quote">
------- Original Message -------<br>
On Monday, September 11th, 2023 at 14:34, Markus Calmius <markus.calmius@proton.ch> wrote:<br><br>
<blockquote class="protonmail_quote" type="cite">
<div style="font-family: Arial, sans-serif; font-size: 14px;">Thank you Fabian and David for the information. </div><div style="font-family: Arial, sans-serif; font-size: 14px;">I will read the pages you've linked to and see if I can figure it out .</div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div>
<div style="font-family: Arial, sans-serif; font-size: 14px;" class="protonmail_signature_block">
<div class="protonmail_signature_block-user">
Markus Calmius<br>Proton AG
</div>
<div class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div class="protonmail_quote">
------- Original Message -------<br>
On Monday, September 11th, 2023 at 09:46, Markus Calmius <markus.calmius@proton.ch> wrote:<br><br>
<blockquote type="cite" class="protonmail_quote">
<div style="font-family: Arial, sans-serif; font-size: 14px;">Hi,</div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;">I'm trying to figure out how to best integrate an existing LDAP server that contains users and groups. The users is not a difficult problem to solve, but the groups and mainly the group-membership eats up quite some time for me.</div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;">To be fair, I am quite new to midPoint (although I have taken the fundamentals training), and I am still wrapping my head around everything.</div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;">What I want to achieve, in the long run, is for midPoint to be the authoritative source for the LDAP directory, but before getting there, I need to import everything.</div><div style="font-family: Arial, sans-serif; font-size: 14px;">Using various pages from the mailing-list and docs.evovleum.com I have managed to import all groups as roles. Which is the first step I guess, but since the midPoint Role doesn't contains "members" I got a bit stuck. The problem with searching things online is that there isn't a "best before" note on the information you find. So sometimes the information is old and dated. </div><div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;">So, I basically have two questions:</div><div style="font-family: Arial, sans-serif; font-size: 14px;"><ol><li><span>is there a better way to do this?</span></li><li><span>if not, how do I also get the midPoint roles to include the ldap group membership</span></li></ol><div><span><br></span></div><div><span>If you can point me in the right direction I will much appreciate it.</span></div></div><div style="font-family: Arial, sans-serif; font-size: 14px;"> </div><div style="font-family: Arial, sans-serif; font-size: 14px;">Thanks in advance!</div>
<div class="protonmail_signature_block" style="font-family: Arial, sans-serif; font-size: 14px;">
<div class="protonmail_signature_block-user">
Markus Calmius<br><br></div>
<div class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
</blockquote><br>
</div>
</blockquote><br>
</div>