You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@syncope.apache.org by Manfredo Hopp <mh...@gmail.com> on 2014/11/11 17:39:38 UTC
Understanding virtual attributes
Hello, my testing involved a syncronization task with external resource
mapping with virtual attributes. After running this task I want to
propagate to external resource mapping those virtual attributes as
mandatory fields. As far as I undesrtand from documentation it states that
Virtual attribute values are:
- unaffected by synchronizing the resource where they come from (if and
only if the values are coming from one resource only)
- available for propagation towards external resources
When I run propagation result is
Caused by: org.apache.syncope.core.propagation.PropagationException:
Exception during provision on resource propagacion
IllegalArgumentException: Not attempted because there are mandatory
attributes without value(s): [apellido, nombre]
So presumably attributes are null so, when or where are those attributes
values generated?
Thank you Manfredo
Re: Understanding virtual attributes
Posted by Manfredo Hopp <mh...@gmail.com>.
It worked!
Thank you Fabio
2014-11-12 14:14 GMT-03:00 Fabio Martelli <fa...@gmail.com>:
>
> Il 12/11/2014 17:13, Manfredo Hopp ha scritto:
>
> Fabio, yes that is the use case.
>
> Mappings for resource1.
>
> Hi Monfredo, the problem is that you didn't assign the resource to the
> user.
>
> .....
> securityQuestion=<null>
> securityAnswer=<null>
> resources=[]
> ....
>
> You can do this by configuring a user template or by specifying the
> unmatchig rule "ASSIGN".
>
> Best regards,
> F.
>
>
>
> [image: Imágenes integradas 1]
>
>
> Manual sync of resource creates users with virtual attributes as seen
> below:
>
> 12:19:27.689 DEBUG
> org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler - Process
> CREATE_OR_UPDATE for 83 as ObjectClass: __ACCOUNT__
> 12:19:27.738 DEBUG
> org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler -
> Transformed: org.apache.syncope.common.to.UserTO@62ca3c20[
> memberships=[]
> status=<null>
> token=<null>
> tokenExpireTime=<null>
> username=83
> lastLoginDate=<null>
> changePwdDate=<null>
> failedLogins=<null>
> securityQuestion=<null>
> securityAnswer=<null>
> resources=[]
> propagationStatusTOs=[]
> id=0
> derAttrs=[]
> virAttrs=[org.apache.syncope.common.to.AttributeTO@4b318b8b[
> schema=nombre
> values=[Norma]
> readonly=false
> ], org.apache.syncope.common.to.AttributeTO@21c0793e[
> schema=apellido
> values=[DELL' OREFICE]
> readonly=false
> ]]
> attrs=[org.apache.syncope.common.to.AttributeTO@6357e6c1[
> schema=usrnum
> values=[83]
> readonly=false
> ], org.apache.syncope.common.to.AttributeTO@1feebbdb[
> schema=usrnum
> values=[83]
> readonly=false
> ]]
> creator=<null>
> creationDate=<null>
> lastModifier=<null>
> lastChangeDate=<null>
> ]
>
> Editing user 83 shows no values on virtual attributes:
>
> [image: Imágenes integradas 2]
>
> Manual pushing on to resource 2 throws:
>
> 12:45:05.793 WARN
> org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler - Error
> pushing SyncopeUser[16991] towards ExternalResource[propagacion]
> org.apache.syncope.core.propagation.PropagationException: Exception during
> provision on resource propagacion
> IllegalArgumentException: Not attempted because there are mandatory
> attributes without value(s): [apellido, nombre]
> java.lang.IllegalArgumentException: Not attempted because there are
> mandatory attributes without value(s): [apellido, nombre]
>
>
> Regards
>
>
> 2014-11-12 5:16 GMT-03:00 Fabio Martelli <fa...@gmail.com>:
>
>> Il 11/11/2014 21:32, Manfredo Hopp ha scritto:
>>
>> Hi Fabio, hope this is what you ment.
>>
>> Hi Manfredo, this is exactly what I meant.
>> What does it happen if you modify "User 93" providing values for virtual
>> attributes?
>> If and only if the resource in object has been assigned to the user these
>> values have to be propagated.
>>
>> Let me better understand. Is your use case the following:
>> 1. 2 external resources
>> 2. sync from resource 1 (containing values for virtual attributes)
>> 3. propagate automatically to resource 2 (with available mapping for
>> virtual attributes)
>>
>> :| quite sure to be wrong .... please, correct me providing your exact
>> use case.
>>
>> Best regards,
>>
>> F.
>>
>>
>>
>> Regards
>>
>> [image: Imágenes integradas 1]
>>
>>
>> [image: Imágenes integradas 2]
>>
>> [image: Imágenes integradas 3]
>>
>> 2014-11-11 17:19 GMT-03:00 Fabio Martelli <fa...@gmail.com>:
>>
>>> Hi Manfredo, have you given those attributes to the user? Can you
>>> provide screenshots about user create or modify?
>>>
>>> Regards,
>>> F.
>>>
>>> Il 11 novembre 2014 19:30:23 CET, Manfredo Hopp <mh...@gmail.com>
>>> ha scritto:
>>>
>>>> Hy Fabio, I think assigned those attributes to be propagated in
>>>> resource's user mappings with purpose PROP && SYNC without results.
>>>>
>>>>
>>>> [image: Imágenes integradas 1]
>>>>
>>>> 2014-11-11 14:36 GMT-03:00 Fabio Martelli <fa...@gmail.com>:
>>>>
>>>>> Hi Manfredo, have you assigned these attributes to the user to be
>>>>> propagated?
>>>>>
>>>>> Virtual attribute values are stored on the external resources: if the
>>>>> user is not already assigned to a resource with a mapping about these
>>>>> attributes, then you have to specify a (new) value for this attributes
>>>>> contextually to the operation to be propagated.
>>>>>
>>>>> Please, be sure to have given these attributes to the user/role and
>>>>> that their values exist somewhere.
>>>>>
>>>>> Regards,
>>>>> F.
>>>>>
>>>>> Il 11 novembre 2014 17:39:38 CET, Manfredo Hopp <
>>>>> mhopp.conicet@gmail.com> ha scritto:
>>>>>
>>>>>> Hello, my testing involved a syncronization task with external
>>>>>> resource mapping with virtual attributes. After running this task I want to
>>>>>> propagate to external resource mapping those virtual attributes as
>>>>>> mandatory fields. As far as I undesrtand from documentation it states that
>>>>>>
>>>>>> Virtual attribute values are:
>>>>>>
>>>>>> - unaffected by synchronizing the resource where they come from
>>>>>> (if and only if the values are coming from one resource only)
>>>>>> - available for propagation towards external resources
>>>>>>
>>>>>>
>>>>>> When I run propagation result is
>>>>>>
>>>>>> Caused by:
>>>>>> org.apache.syncope.core.propagation.PropagationException: Exception during
>>>>>> provision on resource propagacion
>>>>>> IllegalArgumentException: Not attempted because there are mandatory
>>>>>> attributes without value(s): [apellido, nombre]
>>>>>>
>>>>>> So presumably attributes are null so, when or where are those
>>>>>> attributes values generated?
>>>>>>
>>>>>> Thank you Manfredo
>>>>>>
>>>>>
>>>>> -- Inviato dal mio cellulare Android con K-9 Mail.
>>>>>
>>>>
>>>>
>>> -- Inviato dal mio cellulare Android con K-9 Mail.
>>>
>>
>>
>>
>> --
>> Fabio Martelli
>>
>> Tirasa - Open Source Excellencehttp://www.tirasa.net/
>>
>> Apache Syncope PMChttp://people.apache.org/~fmartelli/
>>
>>
>
>
> --
> Fabio Martelli
>
> Tirasa - Open Source Excellencehttp://www.tirasa.net/
>
> Apache Syncope PMChttp://people.apache.org/~fmartelli/
>
>
Re: Understanding virtual attributes
Posted by Fabio Martelli <fa...@gmail.com>.
Il 12/11/2014 17:13, Manfredo Hopp ha scritto:
> Fabio, yes that is the use case.
>
> Mappings for resource1.
Hi Monfredo, the problem is that you didn't assign the resource to the user.
.....
securityQuestion=<null>
securityAnswer=<null>
resources=[]
....
You can do this by configuring a user template or by specifying the
unmatchig rule "ASSIGN".
Best regards,
F.
>
>
> Imágenes integradas 1
>
>
> Manual sync of resource creates users with virtual attributes as seen
> below:
>
> 12:19:27.689 DEBUG
> org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler -
> Process CREATE_OR_UPDATE for 83 as ObjectClass: __ACCOUNT__
> 12:19:27.738 DEBUG
> org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler -
> Transformed: org.apache.syncope.common.to.UserTO@62ca3c20[
> memberships=[]
> status=<null>
> token=<null>
> tokenExpireTime=<null>
> username=83
> lastLoginDate=<null>
> changePwdDate=<null>
> failedLogins=<null>
> securityQuestion=<null>
> securityAnswer=<null>
> resources=[]
> propagationStatusTOs=[]
> id=0
> derAttrs=[]
> virAttrs=[org.apache.syncope.common.to.AttributeTO@4b318b8b[
> schema=nombre
> values=[Norma]
> readonly=false
> ], org.apache.syncope.common.to.AttributeTO@21c0793e[
> schema=apellido
> values=[DELL' OREFICE]
> readonly=false
> ]]
> attrs=[org.apache.syncope.common.to.AttributeTO@6357e6c1[
> schema=usrnum
> values=[83]
> readonly=false
> ], org.apache.syncope.common.to.AttributeTO@1feebbdb[
> schema=usrnum
> values=[83]
> readonly=false
> ]]
> creator=<null>
> creationDate=<null>
> lastModifier=<null>
> lastChangeDate=<null>
> ]
>
> Editing user 83 shows no values on virtual attributes:
>
> Imágenes integradas 2
>
> Manual pushing on to resource 2 throws:
>
> 12:45:05.793 WARN
> org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler -
> Error pushing SyncopeUser[16991] towards ExternalResource[propagacion]
> org.apache.syncope.core.propagation.PropagationException: Exception
> during provision on resource propagacion
> IllegalArgumentException: Not attempted because there are mandatory
> attributes without value(s): [apellido, nombre]
> java.lang.IllegalArgumentException: Not attempted because there are
> mandatory attributes without value(s): [apellido, nombre]
>
>
> Regards
>
>
> 2014-11-12 5:16 GMT-03:00 Fabio Martelli <fabio.martelli@gmail.com
> <ma...@gmail.com>>:
>
> Il 11/11/2014 21:32, Manfredo Hopp ha scritto:
>> Hi Fabio, hope this is what you ment.
> Hi Manfredo, this is exactly what I meant.
> What does it happen if you modify "User 93" providing values for
> virtual attributes?
> If and only if the resource in object has been assigned to the
> user these values have to be propagated.
>
> Let me better understand. Is your use case the following:
> 1. 2 external resources
> 2. sync from resource 1 (containing values for virtual attributes)
> 3. propagate automatically to resource 2 (with available mapping
> for virtual attributes)
>
> :| quite sure to be wrong .... please, correct me providing your
> exact use case.
>
> Best regards,
>
> F.
>
>>
>> Regards
>>
>> Imágenes integradas 1
>>
>>
>> Imágenes integradas 2
>>
>> Imágenes integradas 3
>>
>> 2014-11-11 17:19 GMT-03:00 Fabio Martelli
>> <fabio.martelli@gmail.com <ma...@gmail.com>>:
>>
>> Hi Manfredo, have you given those attributes to the user? Can
>> you provide screenshots about user create or modify?
>>
>> Regards,
>> F.
>>
>> Il 11 novembre 2014 19:30:23 CET, Manfredo Hopp
>> <mhopp.conicet@gmail.com <ma...@gmail.com>> ha
>> scritto:
>>
>> Hy Fabio, I think assigned those attributes to be
>> propagated in resource's user mappings with purpose PROP
>> && SYNC without results.
>>
>>
>> Imágenes integradas 1
>>
>> 2014-11-11 14:36 GMT-03:00 Fabio Martelli
>> <fabio.martelli@gmail.com <ma...@gmail.com>>:
>>
>> Hi Manfredo, have you assigned these attributes to
>> the user to be propagated?
>>
>> Virtual attribute values are stored on the external
>> resources: if the user is not already assigned to a
>> resource with a mapping about these attributes, then
>> you have to specify a (new) value for this attributes
>> contextually to the operation to be propagated.
>>
>> Please, be sure to have given these attributes to the
>> user/role and that their values exist somewhere.
>>
>> Regards,
>> F.
>>
>> Il 11 novembre 2014 17:39:38 CET, Manfredo Hopp
>> <mhopp.conicet@gmail.com
>> <ma...@gmail.com>> ha scritto:
>>
>> Hello, my testing involved a syncronization task
>> with external resource mapping with virtual
>> attributes. After running this task I want to
>> propagate to external resource mapping those
>> virtual attributes as mandatory fields. As far as
>> I undesrtand from documentation it states that
>>
>> Virtual attribute values are:
>>
>> * unaffected by synchronizing the resource
>> where they come from (if and only if the
>> values are coming from one resource only)
>> * available for propagation towards external
>> resources
>>
>>
>> When I run propagation result is
>>
>> Caused by:
>> org.apache.syncope.core.propagation.PropagationException:
>> Exception during provision on resource propagacion
>> IllegalArgumentException: Not attempted because
>> there are mandatory attributes without value(s):
>> [apellido, nombre]
>>
>> So presumably attributes are null so, when or
>> where are those attributes values generated?
>>
>> Thank you Manfredo
>>
>>
>> -- Inviato dal mio cellulare Android con K-9 Mail.
>>
>>
>>
>> -- Inviato dal mio cellulare Android con K-9 Mail.
>>
>>
>
>
> --
> Fabio Martelli
>
> Tirasa - Open Source Excellence
> http://www.tirasa.net/
>
> Apache Syncope PMC
> http://people.apache.org/~fmartelli/ <http://people.apache.org/%7Efmartelli/>
>
>
--
Fabio Martelli
Tirasa - Open Source Excellence
http://www.tirasa.net/
Apache Syncope PMC
http://people.apache.org/~fmartelli/
Re: Understanding virtual attributes
Posted by Manfredo Hopp <mh...@gmail.com>.
Fabio, yes that is the use case.
Mappings for resource1.
[image: Imágenes integradas 1]
Manual sync of resource creates users with virtual attributes as seen below:
12:19:27.689 DEBUG
org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler - Process
CREATE_OR_UPDATE for 83 as ObjectClass: __ACCOUNT__
12:19:27.738 DEBUG
org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler -
Transformed: org.apache.syncope.common.to.UserTO@62ca3c20[
memberships=[]
status=<null>
token=<null>
tokenExpireTime=<null>
username=83
lastLoginDate=<null>
changePwdDate=<null>
failedLogins=<null>
securityQuestion=<null>
securityAnswer=<null>
resources=[]
propagationStatusTOs=[]
id=0
derAttrs=[]
virAttrs=[org.apache.syncope.common.to.AttributeTO@4b318b8b[
schema=nombre
values=[Norma]
readonly=false
], org.apache.syncope.common.to.AttributeTO@21c0793e[
schema=apellido
values=[DELL' OREFICE]
readonly=false
]]
attrs=[org.apache.syncope.common.to.AttributeTO@6357e6c1[
schema=usrnum
values=[83]
readonly=false
], org.apache.syncope.common.to.AttributeTO@1feebbdb[
schema=usrnum
values=[83]
readonly=false
]]
creator=<null>
creationDate=<null>
lastModifier=<null>
lastChangeDate=<null>
]
Editing user 83 shows no values on virtual attributes:
[image: Imágenes integradas 2]
Manual pushing on to resource 2 throws:
12:45:05.793 WARN
org.apache.syncope.core.sync.impl.AbstractSyncopeResultHandler - Error
pushing SyncopeUser[16991] towards ExternalResource[propagacion]
org.apache.syncope.core.propagation.PropagationException: Exception during
provision on resource propagacion
IllegalArgumentException: Not attempted because there are mandatory
attributes without value(s): [apellido, nombre]
java.lang.IllegalArgumentException: Not attempted because there are
mandatory attributes without value(s): [apellido, nombre]
Regards
2014-11-12 5:16 GMT-03:00 Fabio Martelli <fa...@gmail.com>:
> Il 11/11/2014 21:32, Manfredo Hopp ha scritto:
>
> Hi Fabio, hope this is what you ment.
>
> Hi Manfredo, this is exactly what I meant.
> What does it happen if you modify "User 93" providing values for virtual
> attributes?
> If and only if the resource in object has been assigned to the user these
> values have to be propagated.
>
> Let me better understand. Is your use case the following:
> 1. 2 external resources
> 2. sync from resource 1 (containing values for virtual attributes)
> 3. propagate automatically to resource 2 (with available mapping for
> virtual attributes)
>
> :| quite sure to be wrong .... please, correct me providing your exact use
> case.
>
> Best regards,
>
> F.
>
>
>
> Regards
>
> [image: Imágenes integradas 1]
>
>
> [image: Imágenes integradas 2]
>
> [image: Imágenes integradas 3]
>
> 2014-11-11 17:19 GMT-03:00 Fabio Martelli <fa...@gmail.com>:
>
>> Hi Manfredo, have you given those attributes to the user? Can you provide
>> screenshots about user create or modify?
>>
>> Regards,
>> F.
>>
>> Il 11 novembre 2014 19:30:23 CET, Manfredo Hopp <mh...@gmail.com>
>> ha scritto:
>>
>>> Hy Fabio, I think assigned those attributes to be propagated in
>>> resource's user mappings with purpose PROP && SYNC without results.
>>>
>>>
>>> [image: Imágenes integradas 1]
>>>
>>> 2014-11-11 14:36 GMT-03:00 Fabio Martelli <fa...@gmail.com>:
>>>
>>>> Hi Manfredo, have you assigned these attributes to the user to be
>>>> propagated?
>>>>
>>>> Virtual attribute values are stored on the external resources: if the
>>>> user is not already assigned to a resource with a mapping about these
>>>> attributes, then you have to specify a (new) value for this attributes
>>>> contextually to the operation to be propagated.
>>>>
>>>> Please, be sure to have given these attributes to the user/role and
>>>> that their values exist somewhere.
>>>>
>>>> Regards,
>>>> F.
>>>>
>>>> Il 11 novembre 2014 17:39:38 CET, Manfredo Hopp <
>>>> mhopp.conicet@gmail.com> ha scritto:
>>>>
>>>>> Hello, my testing involved a syncronization task with external
>>>>> resource mapping with virtual attributes. After running this task I want to
>>>>> propagate to external resource mapping those virtual attributes as
>>>>> mandatory fields. As far as I undesrtand from documentation it states that
>>>>>
>>>>> Virtual attribute values are:
>>>>>
>>>>> - unaffected by synchronizing the resource where they come from
>>>>> (if and only if the values are coming from one resource only)
>>>>> - available for propagation towards external resources
>>>>>
>>>>>
>>>>> When I run propagation result is
>>>>>
>>>>> Caused by: org.apache.syncope.core.propagation.PropagationException:
>>>>> Exception during provision on resource propagacion
>>>>> IllegalArgumentException: Not attempted because there are mandatory
>>>>> attributes without value(s): [apellido, nombre]
>>>>>
>>>>> So presumably attributes are null so, when or where are those
>>>>> attributes values generated?
>>>>>
>>>>> Thank you Manfredo
>>>>>
>>>>
>>>> -- Inviato dal mio cellulare Android con K-9 Mail.
>>>>
>>>
>>>
>> -- Inviato dal mio cellulare Android con K-9 Mail.
>>
>
>
>
> --
> Fabio Martelli
>
> Tirasa - Open Source Excellencehttp://www.tirasa.net/
>
> Apache Syncope PMChttp://people.apache.org/~fmartelli/
>
>
Re: Understanding virtual attributes
Posted by Fabio Martelli <fa...@gmail.com>.
Il 11/11/2014 21:32, Manfredo Hopp ha scritto:
> Hi Fabio, hope this is what you ment.
Hi Manfredo, this is exactly what I meant.
What does it happen if you modify "User 93" providing values for virtual
attributes?
If and only if the resource in object has been assigned to the user
these values have to be propagated.
Let me better understand. Is your use case the following:
1. 2 external resources
2. sync from resource 1 (containing values for virtual attributes)
3. propagate automatically to resource 2 (with available mapping for
virtual attributes)
:| quite sure to be wrong .... please, correct me providing your exact
use case.
Best regards,
F.
>
> Regards
>
> Imágenes integradas 1
>
>
> Imágenes integradas 2
>
> Imágenes integradas 3
>
> 2014-11-11 17:19 GMT-03:00 Fabio Martelli <fabio.martelli@gmail.com
> <ma...@gmail.com>>:
>
> Hi Manfredo, have you given those attributes to the user? Can you
> provide screenshots about user create or modify?
>
> Regards,
> F.
>
> Il 11 novembre 2014 19:30:23 CET, Manfredo Hopp
> <mhopp.conicet@gmail.com <ma...@gmail.com>> ha
> scritto:
>
> Hy Fabio, I think assigned those attributes to be propagated
> in resource's user mappings with purpose PROP && SYNC without
> results.
>
>
> Imágenes integradas 1
>
> 2014-11-11 14:36 GMT-03:00 Fabio Martelli
> <fabio.martelli@gmail.com <ma...@gmail.com>>:
>
> Hi Manfredo, have you assigned these attributes to the
> user to be propagated?
>
> Virtual attribute values are stored on the external
> resources: if the user is not already assigned to a
> resource with a mapping about these attributes, then you
> have to specify a (new) value for this attributes
> contextually to the operation to be propagated.
>
> Please, be sure to have given these attributes to the
> user/role and that their values exist somewhere.
>
> Regards,
> F.
>
> Il 11 novembre 2014 17:39:38 CET, Manfredo Hopp
> <mhopp.conicet@gmail.com <ma...@gmail.com>>
> ha scritto:
>
> Hello, my testing involved a syncronization task
> with external resource mapping with virtual
> attributes. After running this task I want to
> propagate to external resource mapping those virtual
> attributes as mandatory fields. As far as I undesrtand
> from documentation it states that
>
> Virtual attribute values are:
>
> * unaffected by synchronizing the resource where
> they come from (if and only if the values are
> coming from one resource only)
> * available for propagation towards external resources
>
>
> When I run propagation result is
>
> Caused by:
> org.apache.syncope.core.propagation.PropagationException:
> Exception during provision on resource propagacion
> IllegalArgumentException: Not attempted because there
> are mandatory attributes without value(s): [apellido,
> nombre]
>
> So presumably attributes are null so, when or where
> are those attributes values generated?
>
> Thank you Manfredo
>
>
> -- Inviato dal mio cellulare Android con K-9 Mail.
>
>
>
> -- Inviato dal mio cellulare Android con K-9 Mail.
>
>
--
Fabio Martelli
Tirasa - Open Source Excellence
http://www.tirasa.net/
Apache Syncope PMC
http://people.apache.org/~fmartelli/
Re: Understanding virtual attributes
Posted by Fabio Martelli <fa...@gmail.com>.
Hi Manfredo, have you assigned these attributes to the user to be propagated?
Virtual attribute values are stored on the external resources: if the user is not already assigned to a resource with a mapping about these attributes, then you have to specify a (new) value for this attributes contextually to the operation to be propagated.
Please, be sure to have given these attributes to the user/role and that their values exist somewhere.
Regards,
F.
Il 11 novembre 2014 17:39:38 CET, Manfredo Hopp <mh...@gmail.com> ha scritto:
>Hello, my testing involved a syncronization task with external
>resource
>mapping with virtual attributes. After running this task I want to
> propagate to external resource mapping those virtual attributes as
>mandatory fields. As far as I undesrtand from documentation it states
>that
>
>Virtual attribute values are:
>
>- unaffected by synchronizing the resource where they come from (if and
> only if the values are coming from one resource only)
> - available for propagation towards external resources
>
>
>When I run propagation result is
>
>Caused by: org.apache.syncope.core.propagation.PropagationException:
>Exception during provision on resource propagacion
>IllegalArgumentException: Not attempted because there are mandatory
>attributes without value(s): [apellido, nombre]
>
>So presumably attributes are null so, when or where are those
>attributes
>values generated?
>
>Thank you Manfredo
-- Inviato dal mio cellulare Android con K-9 Mail.