Comments (3)
ryannewington
commented on September 6, 2024
I have this working in my environment currently. Here's the full MRE rule
<Rule>
<Name>Provision user ==> Lds</Name>
<Description>Provisions a user to LDS</Description>
<TargetManagementAgentName>LDS</TargetManagementAgentName>
<Enabled>true</Enabled>
<SourceObject>user</SourceObject>
<TargetObject>idmUserProxy</TargetObject>
<Action>Provision</Action>
<Conditions>
<ConditionBase xsi:type="ConditionMatch">
<Description>Only if person has a provisionToLds flag set to true</Description>
<MVAttribute>provisionToLds</MVAttribute>
<Pattern>True</Pattern>
</ConditionBase>
<ConditionBase xsi:type="ConditionIsPresent">
<Description>Check if csObjectID is present</Description>
<MVAttribute>csObjectID</MVAttribute>
</ConditionBase>
<ConditionBase xsi:type="ConditionIsPresent">
<Description>Check if objectSid is present</Description>
<MVAttribute>objectSid</MVAttribute>
</ConditionBase>
</Conditions>
<InitialFlows>
<AttributeFlowBase xsi:type="AttributeFlowAttribute">
<Source>objectSid</Source>
<Target>objectSid</Target>
</AttributeFlowBase>
<AttributeFlowBase xsi:type="AttributeFlowAttribute">
<Source>ldsDN</Source>
<Target>[DN]</Target>
</AttributeFlowBase>
</InitialFlows>
</Rule>
Is the constraint violation actually coming from the objectSID attribute or something else?
from mre.
VVincent0
commented on September 6, 2024
Yes i am pretty sure that the constraint is on the objectSid attribute because it works when i only set the DN.
It is possible that the error comes from the custom class i use (herited from userproxyfull).
I'll look in that direction.
Thank you for your help.
VUILLAUME Vincent
…________________________________
De : Ryan Newington <[email protected]>
Envoyé : mardi 11 juillet 2017 12:13:48
À : sorengranfeldt/mre
Cc : VUILLAUME Vincent; Author
Objet : Re: [sorengranfeldt/mre] UserProxy provision (#2)
I have this working in my environment currently. Here's the full MRE rule
<Rule>
<Name>Provision user ==> Lds</Name>
<Description>Provisions a user to LDS</Description>
<TargetManagementAgentName>LDS</TargetManagementAgentName>
<Enabled>true</Enabled>
<SourceObject>user</SourceObject>
<TargetObject>idmUserProxy</TargetObject>
<Action>Provision</Action>
<Conditions>
<ConditionBase xsi:type="ConditionMatch">
<Description>Only if person has a provisionToLds flag set to true</Description>
<MVAttribute>provisionToLds</MVAttribute>
<Pattern>True</Pattern>
</ConditionBase>
<ConditionBase xsi:type="ConditionIsPresent">
<Description>Check if csObjectID is present</Description>
<MVAttribute>csObjectID</MVAttribute>
</ConditionBase>
<ConditionBase xsi:type="ConditionIsPresent">
<Description>Check if objectSid is present</Description>
<MVAttribute>objectSid</MVAttribute>
</ConditionBase>
</Conditions>
<InitialFlows>
<AttributeFlowBase xsi:type="AttributeFlowAttribute">
<Source>objectSid</Source>
<Target>objectSid</Target>
</AttributeFlowBase>
<AttributeFlowBase xsi:type="AttributeFlowAttribute">
<Source>ldsDN</Source>
<Target>[DN]</Target>
</AttributeFlowBase>
</InitialFlows>
</Rule>
Is the constraint violation actually coming from the objectSID attribute or something else?
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub<#2 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AcChJzMA6pXjULoLhHGdDjnfl55sVy33ks5sM0rcgaJpZM4OUAjX>.
from mre.
VVincent0
commented on September 6, 2024
Well, that was indeed due to the custom class i use, now i have the following error "A value for the attribute was not in the acceptable range of values.", and i don't think the DLL is to blame.
Thank you
from mre.
Related Issues (20)
- Allow EscapeDN on ConditionalRename HOT 1
- Add condition MultivalueIsPresent HOT 8
- Update Tracer HOT 1
- Reprovisioning Code not working HOT 1
- Installation steps are not clear HOT 3
- Allow extension code HOT 1
- Allow transforms HOT 5
- MRE in combination with other MetaverseExtensions HOT 2
- Combine MRE with other extensions HOT 12
- RuleFilesAlternativePath HOT 1
- No example for DeprovisionAll? HOT 3
- Suggestion to improve the Date/time conditions HOT 1
- Conditional bitmask request HOT 4
- ConditionAfter HOT 2
- Change a part of the DN metaverse attribute for provisioning
- Handling ObjectAlreadyExistsException HOT 2
- Debugger expects displayName to be bound for all objectclasses HOT 1
- ConditionalRename does not work in a "Provision" action HOT 2
- Rules located after a Rename rule are ignored HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mre.