<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hello Keith<div><br></div><div>We’ve written this custom function to get the user’s manager DN</div><div>We use midpoint’s getManagers function, then get the DN from the manager’s AD shadow</div><div><br></div><div><div style="background-color: rgb(43, 43, 43); color: rgb(169, 183, 198);"><pre style="font-family: "Fira Code", monospace;"><div style="white-space: normal;"><pre style="font-family: "Fira Code", monospace;"><span style="color: rgb(84, 168, 87);"><function><br></span><span style="color: rgb(84, 168, 87);"> </span><span style="color: rgb(53, 159, 244);"><name></span>getManagerDN<span style="color: rgb(53, 159, 244);"></name><br></span><span style="color: rgb(53, 159, 244);"> <parameter </span><span style="color: rgb(186, 186, 186);">xmlns:</span><span style="color: rgb(152, 118, 170);">xsi</span><span style="color: rgb(106, 135, 89);">="http://www.w3.org/2001/XMLSchema-instance" </span><span style="color: rgb(152, 118, 170);">xsi</span><span style="color: rgb(186, 186, 186);">:type</span><span style="color: rgb(106, 135, 89);">="c:ExpressionParameterType"</span><span style="color: rgb(53, 159, 244);">><br></span><span style="color: rgb(53, 159, 244);"> </span><span style="color: rgb(110, 126, 217);"><name></span>user<span style="color: rgb(110, 126, 217);"></name><br></span><span style="color: rgb(110, 126, 217);"> <type></span>c:UserType<span style="color: rgb(110, 126, 217);"></type><br></span><span style="color: rgb(110, 126, 217);"> </span><span style="color: rgb(53, 159, 244);"></parameter><br></span><span style="color: rgb(53, 159, 244);"> <script </span><span style="color: rgb(186, 186, 186);">xmlns:</span><span style="color: rgb(152, 118, 170);">xsi</span><span style="color: rgb(106, 135, 89);">="http://www.w3.org/2001/XMLSchema-instance" </span><span style="color: rgb(152, 118, 170);">xsi</span><span style="color: rgb(186, 186, 186);">:type</span><span style="color: rgb(106, 135, 89);">="c:ScriptExpressionEvaluatorType"</span><span style="color: rgb(53, 159, 244);">><br></span><span style="color: rgb(53, 159, 244);"> </span><span style="color: rgb(110, 126, 217);"><code></span><span style="color: rgb(110, 126, 217); background-color: rgb(54, 65, 53);"><br></span><span style="color: rgb(110, 126, 217); background-color: rgb(54, 65, 53);"> </span><span style="background-color: rgb(54, 65, 53);">import com.evolveum.midpoint.xml.ns._public.common.common_3.ShadowKindType<br></span><span style="background-color: rgb(54, 65, 53);"> import static com.evolveum.midpoint.schema.constants.SchemaConstants.*<br></span><span style="background-color: rgb(54, 65, 53);"> import com.evolveum.midpoint.xml.ns._public.common.common_3.UserType;<br></span><span style="background-color: rgb(54, 65, 53);"><br></span><span style="background-color: rgb(54, 65, 53);"> tmpManagers = midpoint.getManagers(user)<br></span><span style="background-color: rgb(54, 65, 53);"> managerUser = null<br></span><span style="background-color: rgb(54, 65, 53);"><br></span><span style="background-color: rgb(54, 65, 53);"> if (!tmpManagers?.isEmpty()) {<br></span><span style="background-color: rgb(54, 65, 53);"> managerUser = tmpManagers.iterator().next()<br></span><span style="background-color: rgb(54, 65, 53);"> }<br></span><span style="background-color: rgb(54, 65, 53);"> if (managerUser) {<br></span><span style="background-color: rgb(54, 65, 53);"> //get shadow for the resource we're interested (by oid)<br></span><span style="background-color: rgb(54, 65, 53);"> managerShadow = midpoint.getLinkedShadow(managerUser, 'your-ad-resource-oid-here', ShadowKindType.ACCOUNT, 'default')<br></span><span style="background-color: rgb(54, 65, 53);"> if (managerShadow) {<br></span><span style="background-color: rgb(54, 65, 53);"> return basic.getAttributeValue(managerShadow, 'http://midpoint.evolveum.com/xml/ns/public/resource/instance-3', 'dn')</span><span style="background-color: rgb(54, 65, 53);"><br></span><span style="background-color: rgb(54, 65, 53);"> }<br></span><span style="background-color: rgb(54, 65, 53);"> }<br></span><span style="background-color: rgb(54, 65, 53);"> return null<br></span><span style="background-color: rgb(54, 65, 53);"> </span><span style="color: rgb(110, 126, 217);"></code><br></span><span style="color: rgb(110, 126, 217);"> </span><span style="color: rgb(53, 159, 244);"></script><br></span><span style="color: rgb(84, 168, 87);"></function></span></pre></div></pre></div><div><br><blockquote type="cite"><div>Em 9 de jul. de 2024, à(s) 13:51, Keith Hazelton via midPoint <midpoint@lists.evolveum.com> escreveu:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div class="elementToProof" style="font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">Found this in the list archives. Does anyone have a bette solution?</div><div class="elementToProof" style="font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><br></div><div class="elementToProof" style="font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><a href="https://lists.evolveum.com/pipermail/midpoint/2020-December/006654.html" id="LPlnk211940">https://lists.evolveum.com/pipermail/midpoint/2020-December/006654.html</a>r</div><div class="elementToProof" style="font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"><br></div><div class="elementToProof" style="font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;"> --KeithH</div><div id="appendonsend" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"></div><hr tabindex="-1" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; display: inline-block; width: 739.890625px;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;"></span><div id="divRplyFwdMsg" dir="ltr" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><font face="Calibri, sans-serif" style="font-size: 11pt;"><b>From:</b><span class="Apple-converted-space"> </span>midPoint <<a href="mailto:midpoint-bounces@lists.evolveum.com">midpoint-bounces@lists.evolveum.com</a>> on behalf of Philippe via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br><b>Sent:</b><span class="Apple-converted-space"> </span>Tuesday, July 9, 2024 11:30 AM<br><b>To:</b><span class="Apple-converted-space"> </span><a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><span class="Apple-converted-space"> </span><<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br><b>Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:philippebriffod@laposte.net">philippebriffod@laposte.net</a><span class="Apple-converted-space"> </span><<a href="mailto:philippebriffod@laposte.net">philippebriffod@laposte.net</a>><br><b>Subject:</b><span class="Apple-converted-space"> </span>[midPoint] AD LDAP Connector & manager attribute,</font><div> </div></div><div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="font-family: Arial, Helvetica, sans-serif; font-size: 12px;">Hello,<br>I'm looking a way to provision the "manager" attribute in Active Directory<br>This attribute must be contain a DN<br>Is there a way to search in AD (via the connector) or in the account list of the AD resource in Midpoint to get this DN from the manager login or identifier ?<br><br>Thanks<br>Philippe</div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">midPoint mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="mailto:midPoint@lists.evolveum.com" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">midPoint@lists.evolveum.com</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="https://lists.evolveum.com/mailman/listinfo/midpoint" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://lists.evolveum.com/mailman/listinfo/midpoint</a></div></blockquote></div><br></div></body></html>