Il 22/03/2016 17:10, Martin Goldstone ha scritto:
Hi Fabio et al,
I've recreated everything from scratch, still without success. Please
find attached screenshots detailing the current configuration of the
LDAP, staff db, and card db mappings, and the capabilities of the
connectors. Also attached are the log files requested.
Hi Martin, resources and connectors configurations seem to be correct.
Provided logs are not useful: please, change debug level and perform a
new synchronization; collect logs and forward again.
Let's try to summarize...
1. you have the provided configuration in place
2. you created a (sample) new user providing card_link derived
attribute for him
3. you synchronized from carddb but no operation has been performed locally
Right?
Did you try out without propagation and synchronization action classes?
Please, let me know.
Best regards,
F.
Thanks.
On 21 March 2016 at 11:17, Fabio Martelli <[email protected]
<mailto:[email protected]>> wrote:
Hi Marting, find my comments in-line.
Regards,
F.
Il 21/03/2016 11:31, Martin Goldstone ha scritto:
Hi Fabio,
I've completely re-created this resource and no longer have the
account link configured. Unfortunately synchronising still does
nothing.
Would you provide your new configuration?
Interestingly, if I add it as a resource to the user, I see some
errors in the log where it tries to propagate a null entry to the
card number field for the record, but when I click the button to
see the resource data for the user, I can see the cad number as
listed in the database (see attached screenshot). However, the
card number does not appear on the attributes page for the user,
either before or after running another synchronisation.
This shouldn't be a problem.
If I well understood you assigned carddb resource to user
manually, didn't you?
When you generate a propagation directly (by submitting user
profile changes) or indirectly (by synchronizing from another
resource) Syncope will try to update carddb remote account.
Unfortunately, looking at your previously provided screenshots,
card number has been flagged as "read-only" field into its
mapping (see "Mapping purposes" at [1]). In this case card number
won't be provided during propagation.
Be sure to use mapping purposes correctly.
Furthermore, provide resource and connector configuration
screenshots as well. In particular, provide the first tab of
resource configuration page and the last one (Capabilities) of
connectors.
I do think logs could be useful: core-rest.log, core-connid.log,
core.log.
You shouldn't have any trouble with your specific requirements: I
personally know about some installations which are working by
implementing exactly this behaviour.
.... configuration matter for sure.
[1]
https://cwiki.apache.org/confluence/display/SYNCOPE/Schema,+attributes+and+mapping#Schema,attributesandmapping-SchemaMapping
On 21 March 2016 at 08:52, Fabio Martelli
<[email protected] <mailto:[email protected]>> wrote:
Hi Martin, try out removing/disabling Account Link into
carddb-mapping.
AccountId mapping is enough.
Best regards,
F.
Il 18/03/2016 10:28, Martin Goldstone ha scritto:
Hi Marco,
Attached are screenshots of these mappings.
The second database (the one with the K prefix), is one in
the carddb_mapping.
I've also included the derived attribute (staff_ex_link)
Thanks.
On 18 March 2016 at 08:32, Marco Di Sabatino Di Diodoro
<[email protected]
<mailto:[email protected]>> wrote:
Hi Martin,
Il 17/03/2016 18:12, Martin Goldstone ha scritto:
Hi All,
I'm currently building a proof of concept using Apache
Syncope 1.2.7. I've managed to create a user by
synchronising from our openLDAP directory, and I've
also managed to manually create a user and sync ldap to
it. I've then successfully synchronised with a database
containing additional fields for that user. The
accountid field in the database is contained within the
data from LDAP, mapped to an attribute called roll_number.
I have another database that I want to synchronise
additional data for this user from, but its accountid
is roll_number with a prefix of 'K'. If I manually
create another attribute for the user, populate it by
hand with the relevant value beginning with 'K', and
set the mapping accordingly I can synchronise this
properly. However, if I set up a derived attribute for
this consisting of 'K'+roll_number, assign this
attribute to the user and set the mappings accordingly,
it does not synchronise the data. The status says
success but the execution history shows it did nothing
(Users [created/failures]: 0/0 [updated/failures]: 0/0
[deleted/failures]: 0/0 [no operation/ignored]: 0/0). I
thought of creating a synchronisation policy, but
derived attributes are not listed when creating it.
Can anyone point me in the right direction?
Unfortunately I am not in a position to simply get rid
of the 'K' prefix.
Please send me all your resource mapping configurations.
I don't understand if the derived attribute is
configured in the first or second (roll_number with a
prefix of 'K') database.
Marco
Thanks.
--
Martin Goldstone
IT Systems Administrator
IT Services, Innovation Centre 1 (IC1)
Keele University, Keele, Staffordshire, United Kingdom,
ST5 5NB
Telephone: +44 1782 734457 <tel:%2B44%201782%20734457>
G+: http://google.com/+MartinGoldstoneKeele
--
Dott. Marco Di Sabatino Di Diodoro
Tel.+39 3939065570 <tel:%2B39%203939065570>
Tirasa S.r.l.
Viale D'Annunzio 267 - 65127 Pescara
Tel+39 0859116307 <tel:%2B39%200859116307> / FAX+39 0859111173
<tel:%2B39%200859111173>
http://www.tirasa.net
Apache Syncope PMC Member
http://people.apache.org/~mdisabatino/
<http://people.apache.org/%7Emdisabatino/>
--
Martin Goldstone
IT Systems Administrator
IT Services, Innovation Centre 1 (IC1)
Keele University, Keele, Staffordshire, United Kingdom, ST5 5NB
Telephone: +44 1782 734457 <tel:%2B44%201782%20734457>
G+: http://google.com/+MartinGoldstoneKeele
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/
Apache Syncope PMC
http://people.apache.org/~fmartelli/
<http://people.apache.org/%7Efmartelli/>
--
Martin Goldstone
IT Systems Administrator
IT Services, Innovation Centre 1 (IC1)
Keele University, Keele, Staffordshire, United Kingdom, ST5 5NB
Telephone: +44 1782 734457 <tel:%2B44%201782%20734457>
G+: http://google.com/+MartinGoldstoneKeele
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/
Apache Syncope PMC
http://people.apache.org/~fmartelli/
<http://people.apache.org/%7Efmartelli/>
--
Martin Goldstone
IT Systems Administrator
IT Services, Innovation Centre 1 (IC1)
Keele University, Keele, Staffordshire, United Kingdom, ST5 5NB
Telephone: +44 1782 734457
G+: http://google.com/+MartinGoldstoneKeele
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/
Apache Syncope PMC
http://people.apache.org/~fmartelli/
