<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div data-marker="__QUOTED_TEXT__"><div style="font-family: arial, helvetica, sans-serif; color: #000000;" data-mce-style="font-family: arial, helvetica, sans-serif; color: #000000;"><div><div><div><div style="font-size: 12pt; color: #000000; font-family: arial, helvetica, sans-serif;" data-mce-style="font-size: 12pt; color: #000000; font-family: arial, helvetica, sans-serif;"><span style="font-size: 12pt;" data-mce-style="font-size: 12pt;">Hi, </span><br></div><div style="font-size: 12pt;" data-mce-style="font-size: 12pt;"><br><div>Regarding to your use case to move users to an ou=”To Be Deleted” before it you should verify some important parts in configuration like:</div><div>- outbound for attribute DN has exception to skip modify DN for users moved to an ou=”To Be Deleted” </div><div>- in correlation are used attributes like samaAccountName or UserPrincipalName, do not use distinquishedName or dn attribute,</div><div>- in connector configuration for uidAttribute use default value which is objectGUID, </div><div>- for shadows has been used as primary identifier value of active directory attribute objectGUID.</div><br><div>In case of any issue please send anonymized resource configuration to review.</div></div><div style="font-size: 12pt; color: #000000; font-family: arial, helvetica, sans-serif;" data-mce-style="font-size: 12pt; color: #000000; font-family: arial, helvetica, sans-serif;"><br><!--StartFragment--><span style="font-size: 12pt; color: black;" data-mce-style="font-size: 12pt; color: black;">--</span></div><div style="color: #000000; font-family: arial, helvetica, sans-serif;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif;"><span style="font-size: 12pt;" data-mce-style="font-size: 12pt;">Lubomir Marton</span></div><div style="color: #000000; font-family: arial, helvetica, sans-serif;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif;"><span style="font-size: 12pt;" data-mce-style="font-size: 12pt;"><span style="font-size: 12pt;" data-mce-style="font-size: 12pt;"> <!--StartFragment--><span style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;">Identity Management Engineer</span></span></span></div><div style="color: #000000; font-family: arial, helvetica, sans-serif;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif;"><span style="font-size: 12pt;" data-mce-style="font-size: 12pt;"></span><br></div><div style="font-size: 12pt; color: #000000; font-family: arial, helvetica, sans-serif;" data-mce-style="font-size: 12pt; color: #000000; font-family: arial, helvetica, sans-serif;"><hr id="zwchr"><div><b>From: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>To: </b>"Tony Tkacik" <tony.tkacik@evolveum.com>, "midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>Cc: </b>"Ashwill, Steven L" <sashwill@uillinois.edu>, "midPoint General Discussion" <midPoint@lists.evolveum.com><br><b>Sent: </b>Tuesday, March 5, 2024 9:20:23 PM<br><b>Subject: </b>Re: [midPoint] switching from SQL server to Postgres<br></div><br><div><div class="WordSection1"><p class="MsoNormal"><span style="font-family: 'aptos' , sans-serif;" data-mce-style="font-family: 'aptos' , sans-serif;">Found a solution by adding a helper bean to the context and calling an external method in it, but I would prefer an API or native solution you might say for the reason you said.</span></p><p class="MsoNormal"><span style="font-family: 'aptos' , sans-serif;" data-mce-style="font-family: 'aptos' , sans-serif;">Our use case is that one of the AD managers at a university in our system will move employees and students to an ou=”To Be Deleted” before midpoint is told about it. This is our attempt to find the matching records in the shadows so that midpoint doesn’t try to insert the record again on a reconcile. Unfortunately it does not work all the time.</span></p><p class="MsoNormal"><span style="font-family: 'aptos' , sans-serif;" data-mce-style="font-family: 'aptos' , sans-serif;"> </span></p><div><div style="border: none; border-top: solid #e1e1e1 1pt; padding: 3pt 0in 0in 0in;" data-mce-style="border: none; border-top: solid #e1e1e1 1pt; padding: 3pt 0in 0in 0in;"><p class="MsoNormal"><b>From:</b> Tony Tkacik <tony.tkacik@evolveum.com> <br><b>Sent:</b> Thursday, February 29, 2024 2:29 AM<br><b>To:</b> midPoint General Discussion <midpoint@lists.evolveum.com><br><b>Cc:</b> midPoint General Discussion <midPoint@lists.evolveum.com>; Ashwill, Steven L <sashwill@uillinois.edu><br><b>Subject:</b> Re: [midPoint] switching from SQL server to Postgres</p></div></div><p class="MsoNormal"> </p><div><div><p class="MsoNormal"><span style="font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-family: 'arial' , sans-serif; color: black;">Hi,<br>what is your use case for these queries? Maybe there is better supported API for your use case instead of relying on implementation details which may change between releases. </span><span style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;"></span></p></div><div><p class="MsoNormal"><span style="font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-family: 'arial' , sans-serif; color: black;"><br><br></span></p><span style="font-size: 12pt; color: black;" data-mce-style="font-size: 12pt; color: black;">-- </span><span style="font-size: 12pt; color: black;" data-mce-style="font-size: 12pt; color: black;">Anton Tkáčik</span><span style="font-size: 12pt; color: black;" data-mce-style="font-size: 12pt; color: black;">Software Developer</span><span style="font-size: 12pt; color: black;" data-mce-style="font-size: 12pt; color: black;">evolveum.com </span><p class="MsoNormal" style="margin-bottom: 12pt;" data-mce-style="margin-bottom: 12pt;"><span style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;"> </span></p></div><div class="MsoNormal" align="center" style="text-align: center;" data-mce-style="text-align: center;"><hr size="2" width="100%" align="center" id="zwchr"></div><div><p class="MsoNormal"><b><span style="font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-family: 'arial' , sans-serif; color: black;">From: </span></b><span style="font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-family: 'arial' , sans-serif; color: black;">"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com" rel="nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" data-mce-href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br><b>To: </b>"midPoint General Discussion" <<a href="mailto:midPoint@lists.evolveum.com" rel="nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" data-mce-href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>><br><b>Cc: </b>"Ashwill, Steven L" <<a href="mailto:sashwill@uillinois.edu" rel="nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" data-mce-href="mailto:sashwill@uillinois.edu">sashwill@uillinois.edu</a>><br><b>Sent: </b>Tuesday, February 27, 2024 9:54:58 PM<br><b>Subject: </b>[midPoint] switching from SQL server to Postgres</span></p></div><div><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;"> </span></p></div><div><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;">This works when using SQL server. We have this code in one of our resources to query shadow records:</span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> </span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;">SessionFactory sqlService = (SessionFactory) SpringApplicationContextHolder.getApplicationContext().getBean("sessionFactory");</span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;">Session session = sqlService.openSession();</span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> try{<!-- --></span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> Transaction tx = session.beginTransaction();</span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> Query dnQuery = session.createSQLQuery(query).addScalar("<span style="background: yellow;" data-mce-style="background: yellow;">name_orig</span>",StandardBasicTypes.STRING);</span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> </span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;">When we switch to the postgres(native) version I get an error that the session is not found(column name changes to <span style="background: yellow;" data-mce-style="background: yellow;">nameorig</span> ). Should this work in native mode or how do I get a session?</span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> </span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;">As always, any help is appreciated. </span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> </span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> </span></p><p class="MsoNormal" style="margin-bottom: 12pt;" data-mce-style="margin-bottom: 12pt;"><b><span style="color: #13294b; text-transform: uppercase;" data-mce-style="color: #13294b; text-transform: uppercase;">STEVEN L ASHWILL</span></b><span style="color: black;" data-mce-style="color: black;"></span></p><p class="MsoNormal"><span style="color: black;" data-mce-style="color: black;"> </span></p><p class="MsoNormal"><span style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;" data-mce-style="font-size: 12pt; font-family: 'arial' , sans-serif; color: black;"><br>_______________________________________________<br>midPoint mailing list<br><a href="mailto:midPoint@lists.evolveum.com" rel="nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" data-mce-href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br><a href="https://urldefense.com/v3/__https:/lists.evolveum.com/mailman/listinfo/midpoint__;!!DZ3fjg!_V_g3XFQ5JEpV4oDAluCNPdoxZbPp-ThwPrB9xN0ybAxVYLbNsKrKq9wm33lhbe8hr8CtNK4aH3j0qT2y5-xosLK6P0$" rel="nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" data-mce-href="https://urldefense.com/v3/__https:/lists.evolveum.com/mailman/listinfo/midpoint__;!!DZ3fjg!_V_g3XFQ5JEpV4oDAluCNPdoxZbPp-ThwPrB9xN0ybAxVYLbNsKrKq9wm33lhbe8hr8CtNK4aH3j0qT2y5-xosLK6P0$">https://lists.evolveum.com/mailman/listinfo/midpoint</a></span></p></div></div></div><br>_______________________________________________<br>midPoint mailing list<br>midPoint@lists.evolveum.com<br>https://lists.evolveum.com/mailman/listinfo/midpoint<br></div><br><div>-- <br></div><div>Best Regards,<br><br>Matus Macik | Developer and Identity Management Engineer<br>matus.macik@evolveum.com | www.evolveum.com<br>Evolveum</div></div></div></div></div></div><br></div></div></body></html>