Re: Authentication exceptions in client

[ilgrosso]

PeeDub wrote
> In a related question. I created a user and gave that user a basic ADMIN
> role
> on the "/" realm with only the "USER_CREATE" entitlement, and I get a
> ForbiddenException (javax.ws.rs.ForbiddenException: Access is denied) for
> that user. Should this user not be able to create a user via the client?

Could you please provide some more details about what you are attempting to
do, and the complete stacktrace on server side (you can find it in the core
logs)?

Regards.

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: Soft delete users

[ilgrosso]

PeeDub wrote
> I see how to bring up that floating menu, but I couldn't for the life of
> me
> figure out how to use it. I see now that you have to select the ... realm?
> ... and then select the gear and do a bulk update (?) and then select the
> icon for enabling/disabling.

No bulk update, just the "enable" entry, as written above.


PeeDub wrote
> I hope the endpoint is a little more straightforward.  :)

"Talk is cheap, show me the code" (cit.) [1]

Ah, and we welcome contributions [2].
Regards.

[1] https://www.goodreads.com/quotes/437173-talk-is-cheap-show-me-the-code
[2] http://syncope.apache.org/contributing.html

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: Soft delete users

[ilgrosso]

PeeDub wrote
> I can't see how to do this in the console. I'm guessing it's fairly
> obvious
> in the REST API?

About REST, just look at Swagger under /Users/status; the feature is anyway
also available from Admin Console: go to Realms > USER then click on a row
and select "enable" for the floating menu.

Either way, you can choose whether to suspend or reactivate the user on
Syncope and / or one or more of associated resources.

Regards.



--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: I desperately require assistance getting my Syncore installation to work in windows

[ilgrosso]

Just double-click on the downloaded JAR: you should find a directory
hierarchy as follows:

com/
  microsoft/
sqlserver/
  jdbc/

and in the inner folder, a file named

SQLServerDriver.class

Can you confirm?

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: In-depth REST documentation

[ilgrosso]

The latest 2.0.8-SNAPSHOT now features the improvement required: see it in
action at

http://syncope-vm.apache.org:9080/syncope/swagger

under Users > POST /users:


 

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: In-depth REST documentation

[ilgrosso]

Hi,
I see what you mean: the current Swagger spec does not include information
about read-only and required properties; moreover, the class inheritance
(enforced by Jackson as the "@class" property) is not clearly documented.

I have opened 

https://issues.apache.org/jira/browse/SYNCOPE-1274

to track this work.

For example, the sample value for POST /users (e.g. user create) would
change from

{
  "creator": "string",
  "creationDate": "2018-02-11T14:19:38.905Z",
  "lastModifier": "string",
  "lastChangeDate": "2018-02-11T14:19:38.905Z",
  "key": "string",
  "type": "string",
  "realm": "string",
  "status": "string",
  "password": "string",
  "token": "string",
  "tokenExpireTime": "2018-02-11T14:19:38.905Z",
  "username": "string",
  "lastLoginDate": "2018-02-11T14:19:38.905Z",
  "changePwdDate": "2018-02-11T14:19:38.905Z",
  "failedLogins": 0,
  "securityQuestion": "string",
  "securityAnswer": "string",
  "suspended": true,
  "mustChangePassword": true
}

to

{
  "realm": "string",
  "@class": "org.apache.syncope.common.lib.to.UserTO",
  "password": "string",
  "username": "string",
  "securityQuestion": "string",
  "securityAnswer": "string"
}

HTH
Regards.

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: No bundle available when creating a connector.

[ilgrosso]

The problem is now solved: the fix will be shipped with Syncope 2.0.8.

In the meanwhile you can use the suggested workaround, e.g. from Admin
Console, click the "Syncope" box, then "Reload all connectors" in the
floating menu.

Regards.

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: No bundle available when creating a connector.

[ilgrosso]

Hi all,
bug confirmed, and it happens with every distribution, not only the GUI
installer.

https://issues.apache.org/jira/browse/SYNCOPE-1261

Watch the issue above to stay updated.
Regards.

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: UPDATE USERS that are dynamically assigned to groups

[ilgrosso]

> Been testing it and it is working as expected Thank you so much for helping
me. May I know when will the syncope 2.0.7 be released. I want to set up
using the GUI installer the same as my syncope version 2.0.5. Will continue
to update here if I encounter other problems I am now working with the
mustChangePassword attribute. Hoping you'll continue to help me :))) 

Glad to hear it works now :-)

About 2.0.7, there is still some issue to fix [1], but I don't think it will
take long time to complete.

Regards.

[1]
https://issues.apache.org/jira/issues/?jql=project%20%3D%20SYNCOPE%20AND%20issuetype%20%3D%20Bug%20AND%20status%20in%20(Open%2C%20%22In%20Progress%22%2C%20Reopened)%20AND%20fixVersion%20%3D%202.0.7%20ORDER%20BY%20summary%20ASC

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: UPDATE USERS that are dynamically assigned to groups

[ilgrosso]

At first sight I don't see nothing evidently wrong with your External
Resource configuration (I see you're testing something with Gluu, anyway:
interesting...).

Would it be possible for you to try with latest 2.0.7-SNAPSHOT? You can
download the standalone distribution from

https://repository.apache.org/content/groups/snapshots/org/apache/syncope/syncope-standalone/2.0.7-SNAPSHOT/syncope-standalone-2.0.7-20171207.164626-71-distribution.zip

Please let me know if things are different.
Regards.


--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: Request Password Request API Not Working After Upgrade from 2.0.4 to 2.0.6

[ilgrosso]

Oops, you're right, there is a mistake in the conditional logic, just fixed
with [1]

Please revert any other change, and make your UserLogic#resolveReference
method look like [2]

Regards.

[1]
https://github.com/apache/syncope/commit/a9cbd25f872e175fa4c4af52502f55c7b8edcdf1
[2]
https://github.com/apache/syncope/blob/a9cbd25f872e175fa4c4af52502f55c7b8edcdf1/core/logic/src/main/java/org/apache/syncope/core/logic/UserLogic.java#L502-L532

--
Sent from: http://syncope-user.1051894.n5.nabble.com/

Re: Any tutorials?

[ilgrosso]

>From my project root I ran:

mvn clean verify -Dconf.directory=/opt/syncope/conf
-Dbundles.directory=/opt/syncope/bundles -Dlog.directory=/opt/syncope/log

Then I copied the respective *.properties into /opt/syncope/conf
and the respective *.war into Tomcat (CATALINA_HOME/webapps)

Tried with both 8080 and 9080 on these files:

CATALINA_HOME\conf\server.xml (

Ok, please move step by step.

First, since you have 9080 configured on $CATALINA_HOME/conf/server.xml (but
why?), then it's ok to have that port also on 

/opt/syncope/conf/console.properties
/opt/syncope/conf/enduser.properties

Now:

1. shut down Tomcat
2. tail -f (or xtail, better) on $CATALINA_HOME/logs/catalina.out and
/opt/syncope/log/*.log
3. startup Tomcat
4. watch the logs and see if any exception occurs

If any exception is raised, please report; if not, try to access

http://localhost:9080/syncope/

and see if any error is reported there.

If no error, then there is no reason why the Admin Console should not be
working; anyway, keep watching the logs and access

http://localhost:9080/syncope-console/

and see if any error is reported.

HTH
Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Any-tutorials-tp5709363p5709429.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: AW: Password Reset Token Generation Not Working After Upgrading to 2.0.4

[ilgrosso]

Glad to hear this. You're welcome.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Password-Reset-Token-Generation-Not-Working-After-Upgrading-to-2-0-4-tp5709308p5709343.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: AW: Password not propagated when changed via enduser UI

[ilgrosso]

Hi Martin,
FYI SYNCOPE-1125 [1] is now resolved.

Regards.

[1] https://issues.apache.org/jira/browse/SYNCOPE-1125

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Password-not-propagated-when-changed-via-enduser-UI-tp5709275p5709283.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Cannot get Must Change Password to sync with ApacheDS pwdReset Attribute

[ilgrosso]

justin.isenhour wrote
> Are there any configure values that I may have missed while setting up the
> connector or schema object that will impact this?

First of all, are you able to successfully replicate my steps above with
2.0.4-SNAPSHOT in embedded mode [1]?

Regards.

[1]
https://ci.apache.org/projects/syncope/getting-started.html#embedded-mode

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Cannot-get-Must-Change-Password-to-sync-with-ApacheDS-pwdReset-Attribute-tp5709254p5709282.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Cannot get Must Change Password to sync with ApacheDS pwdReset Attribute

[ilgrosso]

Then I can only suggest you to either try Syncope 2.0.4-SNAPSHOT [1] or to
wait 2/3 weeks for Syncope 2.0.4.

If you choose to go with 2.0.4-SNAPSHOT, try with a brand new project rather
than upgrading your existing one.

Regards.

[1]
https://ci.apache.org/projects/syncope/getting-started.html#create-project

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Cannot-get-Must-Change-Password-to-sync-with-ApacheDS-pwdReset-Attribute-tp5709254p5709280.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Access plain attributes on ConnId connector groovy script

[ilgrosso]

Cool :-)

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Access-plain-attributes-on-ConnId-connector-groovy-script-tp5709193p5709195.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Provisioning Users From Syncope To specific AD Group

[ilgrosso]

imilosevic wrote
> Maybe, because I have sent confirmation mail after the post. 
> 
> Is my subscription activated now and should I post again?

Yes, it is now (you can see your posts in the official mailing list archive
at [1]): please send your question once more.

Regards.

[1] https://lists.apache.org/list.html?user@syncope.apache.org

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Provisioning-Users-From-Syncope-To-specific-AD-Group-tp5709086p5709104.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Provisioning Users From Syncope To specific AD Group

[ilgrosso]

Hi,
thanks for subscribing.

However, it seems that even your new post is not accepted:

http://syncope-user.1051894.n5.nabble.com/AD-Mapping-User-To-Specific-Groups-td5709098.html

Maybe you have sent it right before completing the subscription, don't know
what happened.

Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Provisioning-Users-From-Syncope-To-specific-AD-Group-tp5709086p5709101.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Provisioning Users From Syncope To specific AD Group

[ilgrosso]

As Nabble is saying when visiting your post's page, this post was not
accepted.
This because you have not subscribed the mailing list.

If you want your post to be seen by others, please either subscribe via
Nabble (there are buttons for this) or send an empty e-mail to
user-subscr...@syncope.apache.org

Once confirmation is received, try to send again the post.

Regards.


--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Provisioning-Users-From-Syncope-To-specific-AD-Group-tp5709086p5709087.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: AD-sync errors

[ilgrosso]

harikrish...@techaspect.com wrote
> I have already subscribed, dont know why it is not upddated

I see this message, so I confirm you are now subscribed.
Unfortunately, your original message was sent before subscription, it seems.

Let me re-post your message below:


harikrish...@techaspect.com wrote
> I have used AD-sync bundle to sync windows 2008 on ssl, i see the
> following conn errors in the log 
> 
> [2017-03-01T02:20:42.223] net.tirasa.connid.bundles.ad.util.ADUtilities 
> Reading passwords not supported   Method: getAttributesToGet 
> [2017-03-01T02:20:42.223]
> net.tirasa.connid.bundles.ldap.schema.LdapSchemaMapping 
> Attribute __ENABLE__ of object class __ACCOUNT__ is not mapped to an LDAP
> attribute Method: getLdapAttribute 
> 
> 
> Internal attribute External attribute Mandatory Remote KeyPassword
> Purpose   
>   
> username   sAMAccountName  0  0 true 
> password __PASSWORD__ 0  0 true 
>   
>   
> 
> Object-Link is created as 
> 'dn=' + username + ',cn=Domain Users,dc=domain,dc=com' 
> 
> I dont see users are sync with syncope from AD. 



--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/AD-sync-errors-tp5709029p5709033.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: AD-sync errors

[ilgrosso]

You have not subscribed the mailing list (not Nabble, where you did instead),
as several warnings should be telling you.
Please subscribe the mailing list and send your message again.
Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/AD-sync-errors-tp5709029p5709031.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Deploying Syncope Mvn/Wildfly

[ilgrosso]

Hi,
the steps reported look generally good, at a glance.

It seems that your problem is the unavailability of the MariaDB JDBC Driver
at some point.

I haven't the chance to give it a try before tomorrow, but you could
attempt, in the meantime, to:

1. check if the DataSource was correctly defined for MariaDB in Wildfly 10;
see http://stackoverflow.com/a/39868576

2. if this still does not work, remove any Datasource definition from
Wildfly and add instead the following Maven depedency:


org.mariadb.jdbc
mariadb-java-client
1.5.5
http://syncope-user.1051894.n5.nabble.com/Deploying-Syncope-Mvn-Wildfly-tp5708844p5708851.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Error in deploying Syncope

[ilgrosso]

Please follow the official documentation:

http://syncope.apache.org/docs/getting-started.html#maven-project

HTH
Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Error-in-deploying-Syncope-tp5708429p5708834.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Syncope Installation Issue

[ilgrosso]

rajkumar wrote
> Do we have any common drive or path where i can place my project zip
> folder .

No, we don't have that, but I do not understand why you are asking this.
I have already been able to get your syncope.zip archive, attached to this
forum thread.

FYI, I have been able to build your project without issues on Linux. As
already asked above, I'd need you to build it manually on your Windows box
too, to see if this would trigger any error.

Regards.


--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Syncope-Installation-Issue-tp5708775p5708793.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Syncope Installation Issue

[ilgrosso]

The ZIP file is unfortunately not containing any relevant information.

In order to investigate the problem, could you please try to manually run
the generated Maven project?

cd D:\syncope\syncope
mvn clean verify

Naturally, this assumes that 'mvn' is available in the PATH.

Regards.


--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Syncope-Installation-Issue-tp5708775p5708791.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Syncope Installation Issue

[ilgrosso]

The install.log is pointless as it only shows that the archetype did
effectively generate the Maven project for Syncope 2.0.1.


rajkumar wrote
> PFA for install log,  "
*
> mvn clean package
*
> " command is not performing and when it try to perform it is throwing
> below error.

Please report such error, I cannot see nothing about it currently.

Regards.



--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Syncope-Installation-Issue-tp5708775p5708785.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Syncope Installation Issue

[ilgrosso]

Please also send other log files, the content of that one does not help much
to understand your issue.

Also, thanks for subscribing.

Regards.


--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Syncope-Installation-Issue-tp5708775p5708779.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Syncope Installation Issue

[ilgrosso]

Please also attach  D:\syncope\install.log which might contain some
information to dig into your error.

Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Syncope-Installation-Issue-tp5708775p5708777.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Unable to retrieve Users from active directory connector

[ilgrosso]

>From the pull task list, click on the template icon (5th from left); choose
USER and click again; at this point click Next until you get into the
"External resources" screen: there select your Active Directory resource.

Now, when pulling users, they will automatically get assigned to the Active
Directory resource: as a consequence, any change you make in Syncope will be
sent to Active Directory, according to the provided mapping.

HTH
Regards.


--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Unable-to-retrieve-Users-from-active-directory-connector-tp5708583p5708606.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Unable to retrieve Users from active directory connector

[ilgrosso]

The root cause of your specific troubles are quite evident to me:

org.apache.syncope.core.provisioning.api.TimeoutException: Request timeout

Hence, there should be some connection problem during connection to Active
Directory.

Some additional considerations:

 1. you normally don't need a push task: more information at [1]

 2. in order to propagate to Active Directory the changes that you make to
users / groups on Syncope, you will need to associate the Active Directory
resource to users and groups; the easiest way is to configure an user /group
template in the PullTask with such resource assignment

 3. the Active Directory connector, when working in non-SSL mode (e.g. on
port 389) has some limitations (cannot send password updates, cannot create
active users, ...) so I would suggest to move it to SSL / 636

 4. password values cannot be extracted from Active Directory in any form,
hence users pulled from Active Directory do not have password values

HTH
Regards.

[1] https://cwiki.apache.org/confluence/display/SYNCOPE/Push

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Unable-to-retrieve-Users-from-active-directory-connector-tp5708583p5708604.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Unable to retrieve Users from active directory connector

[ilgrosso]

Hi Brian,
as you can read from Nabble where you have posted your question [1],

"This post has NOT been accepted by the mailing list yet."

This because you haven't subscribed yet the user@ mailing list: if you want
to perform this action from within Nabble, just go to

http://syncope-user.1051894.n5.nabble.com/mailing_list/MailingListOptions.jtp?forum=4425151

and click the "Subscribe" button.

Otherwise,

 1. send an empty e-mail to user-subscr...@syncope.apache.org and follow
instructions received
 2. once got the welcome message, send again the e-mail below to
user@syncope.apache.org

HTH
Regards.

[1]
http://syncope-user.1051894.n5.nabble.com/Unable-to-retrieve-Users-from-active-directory-connector-td5708583.html

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Unable-to-retrieve-Users-from-active-directory-connector-tp5708583p5708586.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Getting 500 when I try to Authorize an user from syncope database

[ilgrosso]

srikanth.april30 wrote
> Thanks  ilgrosso for your reply.
> I have already sent a subscription request to user@syncope.apache.org.
> Waiting for the approval.

There is no approval: first you sent a request, then the system replies with
an e-mail where it says how to confirm such a request; normally, just
replying to this e-mail will finally subscribe you.


srikanth.april30 wrote
> On your reply for token and tokenExipreTime fields:
> Sorry I am not clear about your answer. Could you please explain a bit
> more on how can I populate values into these fields (token and
> tokenExpireTime) through syncope-console User Interface?

You cannot.
Such values are meant to be manipulated by workflow actions.
This happens, for example, for double opt-in and password reset.

Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Getting-500-when-I-try-to-Authorize-an-user-from-syncope-database-tp5708417p5708427.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Getting 500 when I try to Authorize an user from syncope database

[ilgrosso]

Hi,
I see you are still not subscribing to the mailing list, so one can only see
that you are posting by visiting Nabble. Which does not happen often, at
least for me.
Please subscribe, it's fairly easy.


srikanth.april30 wrote
> Thanks  ilgrosso for your reply. I have integrated the example code that
> you have given and it's working fine. But I have a question here
> When I checked the rest api at this below url 
> https://cwiki.apache.org/confluence/display/SYNCOPE/REST+API+upgrade#RESTAPIupgrade-UserService
> 
> and could see that under User Service CRUD operations table, having a new
> URL GET /users?username={username} 
> which returns a single user matching the provided username. I have tried
> this but could see all the users are returning as response. In my example
> i have used like below 
> http://localhost:8080/syncope/rest/users?username={administrator}
> or 
> http://localhost:8080/syncope/rest/users?username=administrator. 
> Am I doing any wrong here ? Could  you please correct me ? 

The wiki page you mention above is about upgrading REST API from Syncope 1.0
to Syncope 1.1.
You are running 2.0.0-M2, so that page is clearly not applicable.

The full REST documentation for last stable version (2.0.0-M2 currently) is
available at

http://syncope.apache.org/rest/2.0/index.html

Please check there.


srikanth.april30 wrote
> Also I have one more question on User token and tokenExpireTime creation
> fields while creating user. When I logging into syncope-console UI and
> creating user I could see two columns with names token and
> tokenExpireTime, but not able to enter values into these fields. Could you
> please help me out on how can I populate values into these columns?

Such fields are there for internal usage, whenever it is required to set a
random, time-limited, value for users - say double opt-in, password reset,
...
In general, things that you control from workflow.

HTH
Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Getting-500-when-I-try-to-Authorize-an-user-from-syncope-database-tp5708417p5708425.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Why LDAP external users are also saved at Syncope DB

[ilgrosso]

Hi,
you cannot avoid storing users into the Syncope's internal storage (e.g.
database).

You might, however, empower virtual attributes to minimize the occupancy:
see this other thread [1] for more information.

Regards.

[1]
http://syncope-user.1051894.n5.nabble.com/Virtual-Attributes-td5708402.html

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Why-LDAP-external-users-are-also-saved-at-Syncope-DB-tp5708401p5708404.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Cannot deploy the console.war file in tomcat

[ilgrosso]

Hi, as you can read, your e-mail is not accepted; you need to

1. go to [1] and click "Subscribe"
send an empty e-mail to user-subscr...@syncope.apache.org and follow
instructions received
2. once got the welcome message, re-send the e-mail above either via
Nabble or to user@syncope.apache.org

HTH
Regards.

[1]
http://syncope-user.1051894.n5.nabble.com/mailing_list/MailingListOptions.jtp?forum=4425151

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Cannot-deploy-the-console-war-file-in-tomcat-tp5708257p5708258.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Error While deploying the syncope.war in tomcat

[ilgrosso]

Hi, as you can read, your e-mail is not accepted; you need to

1. go to [1] and click "Subscribe"
send an empty e-mail to user-subscr...@syncope.apache.org and follow
instructions received
2. once got the welcome message, re-send the e-mail above either via
Nabble or to user@syncope.apache.org

HTH
Regards.

[1]
http://syncope-user.1051894.n5.nabble.com/mailing_list/MailingListOptions.jtp?forum=4425151

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Error-While-deploying-the-syncope-war-in-tomcat-tp5708255p5708259.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Could not process connid://testconnectorserver@localhost:4554

[ilgrosso]

Ok, it seems you're finally subscribed :-)

I see the error message in your original post on Nabble, but we need some
context in order to support you:

 1. which Syncope version?
 2. which distribution (standalone, deb, installer, Maven archetype...)
 3. which java version?
 4. which operating system?

Regards.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Could-not-process-connid-testconnectorserver-localhost-4554-tp5708230p5708233.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Could not process connid://testconnectorserver@localhost:4554

[ilgrosso]

I have already told you yesterday: you need to subscribe first in order for
your posts to get accepted.

Please go to

http://syncope-user.1051894.n5.nabble.com/mailing_list/MailingListOptions.jtp?forum=4425151

and click the "Subscribe" button.

Otherwise, you will hardly get any support.

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Could-not-process-connid-testconnectorserver-localhost-4554-tp5708230p5708231.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: Authentication via ConnId connector

[ilgrosso]

FYI, SYNCOPE-164 [1] was recently moved to 1.2.0 and will provide the feature
as per the subject of this thread (Authentication via ConnId connector).

Regards.

[1] https://issues.apache.org/jira/browse/SYNCOPE-164

--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/Authentication-via-ConnId-connector-tp5707583p5707627.html
Sent from the syncope-user mailing list archive at Nabble.com.

Re: An odd work-around for stubborn derived attributes

[ilgrosso]

Hi Edward,
I've finally been able to take a look at the provided information.

You can find my replies below.

Regards.


Edward Siewick wrote
 The only guaranteed unique field from the (OrangeHRM) MySQL resource 
 is the key field, emp_number (an int data type). Within Syncope's 
 Resources / Schema Mappings for the resource, the key field isn't 
 provided as an option in the pulldown for External Attributes. It 
 does get set to Username, however.

Ok, now I see: in the mapping, when you flag a row as 'AccountId' it gets
linked to the key of the underlying resource; for SQL tables, this turns to
be the primary key.

From your mapping, then, I see that you are associating Syncope's username
with the primary key of the hs_hr_employee table, e.g. 8 / 9 / 11 / 14 / 15
/ 16.


Edward Siewick wrote
 Now, the openLDAP wants a uid as a guaranteed unique value. (More 
 precisely, it wants a DN that happens to include the uid.)
 The derived attribute (uid = username) in Schema was still not 
 working out for me. So I decided to poke at this by adding to the 
 MySQL resource's schema mapping uid = emp_firstname (Internal 
 Attributes = External Attributes) which I'd expected would produce a 
 string value in the uid fields.  And, surprise! The derived attribute 
 (uid = username) instantly popped to life. The next run of the sync 
 task with the MySQL resource produced a complete set of (numeric) uids.

 To test this again, I added uidNumber = username as another derived 
 attribute. Again, it wouldn't populate automatically. I added 
 uidNumber = emp_smoker (a smallint in the MySQL schema.) The column 
 populated at the next sync with the MySQL resource.

From the LDAP mapping you have provided, I can see several anomalies:
 1. the external attribute 'uid', usually defined by default as the key (see
above) for LDAP resources, is  mapped to the internal derived attribute
'uid'
 2. the row flagged as 'AccountId' is actually mapped to external attribute
'uid' - this makes double mapping for the same external attribute and leads
to inconsistencies
 3. the internal attribute 'uid' is mapped to three distinct external
attributes: this is problematic for synchronization

I'd suggest you to make this LDAP mapping much simpler by removing all
mappings involving any (internal / external) uid.

Finally, please change the AccountLink to

'uid=' + username + ',ou=people,dc=digipro,dc=com'

That should work.



--
View this message in context: 
http://syncope-user.1051894.n5.nabble.com/An-odd-work-around-for-stubborn-derived-attributes-tp5706896p5706899.html
Sent from the syncope-user mailing list archive at Nabble.com.