Bonjour Clément,
Indeed by removing the ‘objectClass’ attribute from fetchedAttributes in
source service, <createValues/> are took for values in creation of a new entry
while current values in destination are kept at update time.
I didn’t understood well the Functionality matrix statements at
https://lsc-project.org/documentation/latest/configuration/syncoptions.
Thanks.
Eric Brys.
From: lsc-users <[email protected]> On Behalf Of Clément
OUDOT
Sent: dimanche 26 août 2018 11:33
To: [email protected]
Subject: Re: [lsc-users] KEEP policy and <createValues> issue
Le 24/08/2018 à 16:30, ERIC BRYS a écrit :
Hello,
Hello Eric,
We installed the last version LSC core 2.1.4 for a POC to replace our old
Maxware DSE solution for LDAP synchronization.
We are testing different scenarios.
One of them must be able to keep current objectClass attribute’s values for an
existing destination entry, and not take in account the source objectClass’s
values,
while if the entry doesn’t exist on the destination and must be created, the
objectClass attribute should be created with the <createValues/>.
For this we configured the dataset as follow:
<dataset>
<name>objectClass</name>
<policy>KEEP</policy>
<defaultValues>
</defaultValues>
<forceValues>
</forceValues>
<createValues>
<string>"top"</string>
<string>"person"</string>
<string>"organizationalperson"</string>
<string>"inetorgperson"</string>
<string>"picpersonclass"</string>
</createValues>
</dataset>
When running the task, if LSC must create a new entry in the destination, it
does this with the source objectclass’s values and not the listed
<createValue/> ?!
Keeping the current destination values for an existing entry is working
correctly.
Any advise to help us to correctly configure this will be appreciate.
You need to remove objectClass from fetchedAttributes in source service, and
have it only in fetchedAttributes in destination service.
--
Clément Oudot | Identity Solutions Manager
[email protected]<mailto:[email protected]>
Worteks | https://www.worteks.com
This message is not intended for persons who are citizens of, domiciled or
resident in, or entities registered in a country or jurisdiction in which its
distribution, publication, provision or use would violate current laws and
regulations. The content of this message is confidential and may be read and/or
used only by the recipient of this message. For information about personal data
protection, please refer to the Pictet Group’s Privacy Notice available at
www.group.pictet/privacynotice. If you have received this e-mail message in
error, please destroy it and delete it from your computer. The Pictet Group may
not be held liable for the use, transmission or treatment of the content of
this message. The recipient of this message remains solely liable for any form
of reproduction, copying, disclosure, modification and/or publication of the
content. No liability whatsoever will be incurred by the Pictet Group. The
recipient of this message agrees to comply with the applicable laws and
regulations in the jurisdictions where they use the information contained
herein.<br>_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org
lsc-users mailing list
[email protected]
https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-users
