You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@syncope.apache.org by Naaman Hart <na...@alfresco.com> on 2019/08/30 09:56:32 UTC
Group Sync with Member
Hi,
I'm trying to test syncing one AD to another via Syncope and I have groups syncing but with no members.
From reading your documentation I believe member syncing is possible.
I can't see any mapping internal attributes for 'member' so I can't map it. Is it natively grabbed and something is incorrect with my configuration or is it not possible?
[cid:image015.jpg@01D55F21.933D3840]
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
[cid:image016.png@01D55F21.933D3840]<https://www.alfresco.com/>[cid:image017.png@01D55F21.933D3840]<https://twitter.com/alfresco> [cid:image018.png@01D55F21.933D3840] <https://www.facebook.com/alfrescosoftware/> [cid:image019.png@01D55F21.933D3840] <https://www.linkedin.com/company/alfresco> [cid:image020.png@01D55F21.933D3840] <https://www.youtube.com/c/alfresco> [cid:image021.png@01D55F21.933D3840] <https://www.glassdoor.co.uk/Overview/Working-at-Alfresco-Software-EI_IE404506.11,28.htm>
[cid:image022.png@01D55F21.933D3840]
Re: Group Sync with Member
Posted by Fabio Martelli <fa...@gmail.com>.
Il 23/09/19 12:55, Naaman Hart ha scritto:
>
> Hi Fabio,
>
> No problem.
>
> I’ve ended up settling on another vendor’s utility and am progressing
> this to purchasing.
>
> For not I shouldn’t need anything further.
>
> Thanks for your help.
>
Hi Naaman, no problem.
Kind regards,
F.
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> *From:*Fabio Martelli <fa...@gmail.com>
> *Sent:* 23 September 2019 11:54
> *To:* Naaman Hart <na...@alfresco.com>; user@syncope.apache.org
> *Subject:* Re: Group Sync with Member
>
> *CAUTION:**EXTERNAL MESSAGE*
>
> Hi Naaman, sorry for disappearing but I'm very busy in this period.
>
> Just reproducing your issue, I've just noticed that into the connector
> instance configuration you have specified group object class into
> "Entry object classes" and "Object classes to synchronize". Please remove.
>
>
>
> Let me know.
>
>
>
> Best regards,
>
> F.
>
>
>
> Il 05/09/19 10:51, Naaman Hart ha scritto:
>
> Hi Fabio,
>
> Please see attached.
>
> This is just the source, but I believe for current troubleshooting
> to get Syncope to reflect group members, that should be sufficient.
>
> Let me know if you want the target config also.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> *From:*Fabio Martelli <fa...@gmail.com>
> <ma...@gmail.com>
> *Sent:* 04 September 2019 15:44
> *To:* user@syncope.apache.org <ma...@syncope.apache.org>;
> Naaman Hart <na...@alfresco.com>
> <ma...@alfresco.com>
> *Subject:* Re: Group Sync with Member
>
> *CAUTION:**EXTERNAL MESSAGE*
>
> Il 04/09/19 16:32, Naaman Hart ha scritto:
>
> Thanks Fabio,
>
> The group members reference attribute is ‘member’ and the
> owner reference attribute is ‘managedBy’. See below.
>
> Hi Naaman, please, attach the entire connector configuration.
> Please, do the same with resource.
>
> Regards,
>
> F.
>
> If I add a mapping of Name = Member then browsing source AD
> does show me the attributes. Obviously I don’t need that
> mapping, it’s just to prove that the browse for the attribute
> does work.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> --
>
> Fabio Martelli
>
> https://it.linkedin.com/pub/fabio-martelli/1/974/a44
>
> http://blog.tirasa.net/author/fabio/index.html
>
>
>
> Tirasa - Open Source Excellence
>
> http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
>
>
>
> Apache Syncope PMC
>
> http://people.apache.org/~fmartelli/
>
> --
> Fabio Martelli
> https://it.linkedin.com/pub/fabio-martelli/1/974/a44
> http://blog.tirasa.net/author/fabio/index.html
> Tirasa - Open Source Excellence
> http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
> Apache Syncope PMC
> http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
RE: Group Sync with Member
Posted by Naaman Hart <na...@alfresco.com>.
Hi Fabio,
No problem.
I’ve ended up settling on another vendor’s utility and am progressing this to purchasing.
For not I shouldn’t need anything further.
Thanks for your help.
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 23 September 2019 11:54
To: Naaman Hart <na...@alfresco.com>; user@syncope.apache.org
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Hi Naaman, sorry for disappearing but I'm very busy in this period.
Just reproducing your issue, I've just noticed that into the connector instance configuration you have specified group object class into "Entry object classes" and "Object classes to synchronize". Please remove.
Let me know.
Best regards,
F.
Il 05/09/19 10:51, Naaman Hart ha scritto:
Hi Fabio,
Please see attached.
This is just the source, but I believe for current troubleshooting to get Syncope to reflect group members, that should be sufficient.
Let me know if you want the target config also.
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 04 September 2019 15:44
To: user@syncope.apache.org<ma...@syncope.apache.org>; Naaman Hart <na...@alfresco.com>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Il 04/09/19 16:32, Naaman Hart ha scritto:
Thanks Fabio,
The group members reference attribute is ‘member’ and the owner reference attribute is ‘managedBy’. See below.
Hi Naaman, please, attach the entire connector configuration. Please, do the same with resource.
Regards,
F.
[cid:image001.jpg@01D57205.C9297D00]
If I add a mapping of Name = Member then browsing source AD does show me the attributes. Obviously I don’t need that mapping, it’s just to prove that the browse for the attribute does work.
[cid:image002.jpg@01D57205.C9297D00]
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
Re: Group Sync with Member
Posted by Fabio Martelli <fa...@gmail.com>.
Hi Naaman, sorry for disappearing but I'm very busy in this period.
Just reproducing your issue, I've just noticed that into the connector
instance configuration you have specified group object class into "Entry
object classes" and "Object classes to synchronize". Please remove.
Let me know.
Best regards,
F.
Il 05/09/19 10:51, Naaman Hart ha scritto:
>
> Hi Fabio,
>
> Please see attached.
>
> This is just the source, but I believe for current troubleshooting to
> get Syncope to reflect group members, that should be sufficient.
>
> Let me know if you want the target config also.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> *From:*Fabio Martelli <fa...@gmail.com>
> *Sent:* 04 September 2019 15:44
> *To:* user@syncope.apache.org; Naaman Hart <na...@alfresco.com>
> *Subject:* Re: Group Sync with Member
>
> *CAUTION:**EXTERNAL MESSAGE*
>
> Il 04/09/19 16:32, Naaman Hart ha scritto:
>
> Thanks Fabio,
>
> The group members reference attribute is ‘member’ and the owner
> reference attribute is ‘managedBy’. See below.
>
> Hi Naaman, please, attach the entire connector configuration. Please,
> do the same with resource.
>
> Regards,
>
> F.
>
> If I add a mapping of Name = Member then browsing source AD does
> show me the attributes. Obviously I don’t need that mapping, it’s
> just to prove that the browse for the attribute does work.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> --
> Fabio Martelli
> https://it.linkedin.com/pub/fabio-martelli/1/974/a44
> http://blog.tirasa.net/author/fabio/index.html
> Tirasa - Open Source Excellence
> http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
> Apache Syncope PMC
> http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
RE: Group Sync with Member
Posted by Naaman Hart <na...@alfresco.com>.
Hi Fabio,
At least we’ve confirmed it’s not my config 😊
Have a good weekend and speak soon.
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 06 September 2019 15:55
To: user@syncope.apache.org; Naaman Hart <na...@alfresco.com>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Hi Naaman, I don't really understand why it is not synchronizing memberships and why it is asking for uniqumember attribute.
Your configuration seems to be good ... Next week I'll try to reproduce the problem in the lab.
Have a nice week end.
F.
Il 05/09/19 18:00, Naaman Hart ha scritto:
Hi,
Full sync yes. Please see config below. Also the account does have permission as I use the same account to view the directory with Apache Directory Studio.
Permissions check:
[cid:image001.jpg@01D564CD.A22B2EF0]
Pull task:
[cid:image002.png@01D564CD.A22B2EF0]
[cid:image003.png@01D564CD.A22B2EF0]
[cid:image004.jpg@01D564CD.A22B2EF0]
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 05 September 2019 16:52
To: Naaman Hart <na...@alfresco.com>; user@syncope.apache.org<ma...@syncope.apache.org>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Il 05/09/19 10:51, Naaman Hart ha scritto:
Hi Fabio,
Please see attached.
This is just the source, but I believe for current troubleshooting to get Syncope to reflect group members, that should be sufficient.
Let me know if you want the target config also.
Hi Naaman, I can suppose that your synchronization is full and not incremental, right?
Has c1sync user all the permissions to read group members? Please verify and let me know.
If yes, please attach pull task configuration as well.
Regards,
F.
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 04 September 2019 15:44
To: user@syncope.apache.org<ma...@syncope.apache.org>; Naaman Hart <na...@alfresco.com>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Il 04/09/19 16:32, Naaman Hart ha scritto:
Thanks Fabio,
The group members reference attribute is ‘member’ and the owner reference attribute is ‘managedBy’. See below.
Hi Naaman, please, attach the entire connector configuration. Please, do the same with resource.
Regards,
F.
[cid:image005.jpg@01D564CD.A22B2EF0]
If I add a mapping of Name = Member then browsing source AD does show me the attributes. Obviously I don’t need that mapping, it’s just to prove that the browse for the attribute does work.
[cid:image006.jpg@01D564CD.A22B2EF0]
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
Re: Group Sync with Member
Posted by Fabio Martelli <fa...@gmail.com>.
Hi Naaman, I don't really understand why it is not synchronizing
memberships and why it is asking for uniqumember attribute.
Your configuration seems to be good ... Next week I'll try to reproduce
the problem in the lab.
Have a nice week end.
F.
Il 05/09/19 18:00, Naaman Hart ha scritto:
>
> Hi,
>
> Full sync yes. Please see config below. Also the account does have
> permission as I use the same account to view the directory with Apache
> Directory Studio.
>
> Permissions check:
>
> Pull task:
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> *From:*Fabio Martelli <fa...@gmail.com>
> *Sent:* 05 September 2019 16:52
> *To:* Naaman Hart <na...@alfresco.com>; user@syncope.apache.org
> *Subject:* Re: Group Sync with Member
>
> *CAUTION:**EXTERNAL MESSAGE*
>
> Il 05/09/19 10:51, Naaman Hart ha scritto:
>
> Hi Fabio,
>
> Please see attached.
>
> This is just the source, but I believe for current troubleshooting
> to get Syncope to reflect group members, that should be sufficient.
>
> Let me know if you want the target config also.
>
> Hi Naaman, I can suppose that your synchronization is full and not
> incremental, right?
>
> Has c1sync user all the permissions to read group members? Please
> verify and let me know.
>
> If yes, please attach pull task configuration as well.
>
> Regards,
>
> F.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> *From:*Fabio Martelli <fa...@gmail.com>
> <ma...@gmail.com>
> *Sent:* 04 September 2019 15:44
> *To:* user@syncope.apache.org <ma...@syncope.apache.org>;
> Naaman Hart <na...@alfresco.com>
> <ma...@alfresco.com>
> *Subject:* Re: Group Sync with Member
>
> *CAUTION:**EXTERNAL MESSAGE*
>
> Il 04/09/19 16:32, Naaman Hart ha scritto:
>
> Thanks Fabio,
>
> The group members reference attribute is ‘member’ and the
> owner reference attribute is ‘managedBy’. See below.
>
> Hi Naaman, please, attach the entire connector configuration.
> Please, do the same with resource.
>
> Regards,
>
> F.
>
> If I add a mapping of Name = Member then browsing source AD
> does show me the attributes. Obviously I don’t need that
> mapping, it’s just to prove that the browse for the attribute
> does work.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> --
>
> Fabio Martelli
>
> https://it.linkedin.com/pub/fabio-martelli/1/974/a44
>
> http://blog.tirasa.net/author/fabio/index.html
>
>
>
> Tirasa - Open Source Excellence
>
> http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
>
>
>
> Apache Syncope PMC
>
> http://people.apache.org/~fmartelli/
>
> --
> Fabio Martelli
> https://it.linkedin.com/pub/fabio-martelli/1/974/a44
> http://blog.tirasa.net/author/fabio/index.html
> Tirasa - Open Source Excellence
> http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
> Apache Syncope PMC
> http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
RE: Group Sync with Member
Posted by Naaman Hart <na...@alfresco.com>.
Hi,
Full sync yes. Please see config below. Also the account does have permission as I use the same account to view the directory with Apache Directory Studio.
Permissions check:
[cid:image005.jpg@01D5640B.6E0D9760]
Pull task:
[cid:image006.png@01D5640B.6E0D9760]
[cid:image007.png@01D5640B.6E0D9760]
[cid:image008.png@01D5640B.6E0D9760]
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 05 September 2019 16:52
To: Naaman Hart <na...@alfresco.com>; user@syncope.apache.org
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Il 05/09/19 10:51, Naaman Hart ha scritto:
Hi Fabio,
Please see attached.
This is just the source, but I believe for current troubleshooting to get Syncope to reflect group members, that should be sufficient.
Let me know if you want the target config also.
Hi Naaman, I can suppose that your synchronization is full and not incremental, right?
Has c1sync user all the permissions to read group members? Please verify and let me know.
If yes, please attach pull task configuration as well.
Regards,
F.
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 04 September 2019 15:44
To: user@syncope.apache.org<ma...@syncope.apache.org>; Naaman Hart <na...@alfresco.com>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Il 04/09/19 16:32, Naaman Hart ha scritto:
Thanks Fabio,
The group members reference attribute is ‘member’ and the owner reference attribute is ‘managedBy’. See below.
Hi Naaman, please, attach the entire connector configuration. Please, do the same with resource.
Regards,
F.
[cid:image009.jpg@01D5640B.6E0D9760]
If I add a mapping of Name = Member then browsing source AD does show me the attributes. Obviously I don’t need that mapping, it’s just to prove that the browse for the attribute does work.
[cid:image010.jpg@01D5640B.6E0D9760]
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
Re: Group Sync with Member
Posted by Fabio Martelli <fa...@gmail.com>.
Il 05/09/19 10:51, Naaman Hart ha scritto:
>
> Hi Fabio,
>
> Please see attached.
>
> This is just the source, but I believe for current troubleshooting to
> get Syncope to reflect group members, that should be sufficient.
>
> Let me know if you want the target config also.
>
Hi Naaman, I can suppose that your synchronization is full and not
incremental, right?
Has c1sync user all the permissions to read group members? Please verify
and let me know.
If yes, please attach pull task configuration as well.
Regards,
F.
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> *From:*Fabio Martelli <fa...@gmail.com>
> *Sent:* 04 September 2019 15:44
> *To:* user@syncope.apache.org; Naaman Hart <na...@alfresco.com>
> *Subject:* Re: Group Sync with Member
>
> *CAUTION:**EXTERNAL MESSAGE*
>
> Il 04/09/19 16:32, Naaman Hart ha scritto:
>
> Thanks Fabio,
>
> The group members reference attribute is ‘member’ and the owner
> reference attribute is ‘managedBy’. See below.
>
> Hi Naaman, please, attach the entire connector configuration. Please,
> do the same with resource.
>
> Regards,
>
> F.
>
> If I add a mapping of Name = Member then browsing source AD does
> show me the attributes. Obviously I don’t need that mapping, it’s
> just to prove that the browse for the attribute does work.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> --
> Fabio Martelli
> https://it.linkedin.com/pub/fabio-martelli/1/974/a44
> http://blog.tirasa.net/author/fabio/index.html
> Tirasa - Open Source Excellence
> http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
> Apache Syncope PMC
> http://people.apache.org/~fmartelli/
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
RE: Group Sync with Member
Posted by Naaman Hart <na...@alfresco.com>.
Hi Fabio,
Please see attached.
This is just the source, but I believe for current troubleshooting to get Syncope to reflect group members, that should be sufficient.
Let me know if you want the target config also.
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Fabio Martelli <fa...@gmail.com>
Sent: 04 September 2019 15:44
To: user@syncope.apache.org; Naaman Hart <na...@alfresco.com>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Il 04/09/19 16:32, Naaman Hart ha scritto:
Thanks Fabio,
The group members reference attribute is ‘member’ and the owner reference attribute is ‘managedBy’. See below.
Hi Naaman, please, attach the entire connector configuration. Please, do the same with resource.
Regards,
F.
[cid:image001.jpg@01D563CF.88AFCB60]
If I add a mapping of Name = Member then browsing source AD does show me the attributes. Obviously I don’t need that mapping, it’s just to prove that the browse for the attribute does work.
[cid:image002.jpg@01D563CF.88AFCB60]
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
Re: Group Sync with Member
Posted by Fabio Martelli <fa...@gmail.com>.
Il 04/09/19 16:32, Naaman Hart ha scritto:
>
> Thanks Fabio,
>
> The group members reference attribute is ‘member’ and the owner
> reference attribute is ‘managedBy’. See below.
>
Hi Naaman, please, attach the entire connector configuration. Please, do
the same with resource.
Regards,
F.
> If I add a mapping of Name = Member then browsing source AD does show
> me the attributes. Obviously I don’t need that mapping, it’s just to
> prove that the browse for the attribute does work.
>
> Kind regards,
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm
Apache Syncope PMC
http://people.apache.org/~fmartelli/
RE: Group Sync with Member
Posted by Naaman Hart <na...@alfresco.com>.
Thanks Fabio,
The group members reference attribute is ‘member’ and the owner reference attribute is ‘managedBy’. See below.
[cid:image023.jpg@01D56335.ECD95420]
If I add a mapping of Name = Member then browsing source AD does show me the attributes. Obviously I don’t need that mapping, it’s just to prove that the browse for the attribute does work.
[cid:image024.jpg@01D56335.ECD95420]
Kind regards,
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
Sent: 04 September 2019 15:21
To: Naaman Hart <na...@alfresco.com>;
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Hi NaaMan, it seems you are searching for uniquemember attribute while syncing groups.
I don't remember, did you specified "member" attribute corretly into the connector instance configuration of source-AD?
It seems that the error is just this.
Please move into the community ML for further communications.
Let me know there, by updating the previous thread with some screenshots of your connector configuration.
Kind regards,
F.
-------- Messaggio Inoltrato --------
Oggetto:
RE: Group Sync with Member
Data:
Mon, 2 Sep 2019 12:59:59 +0000
Mittente:
Naaman Hart <na...@alfresco.com>
Rispondi-a:
user@syncope.apache.org<ma...@syncope.apache.org>
A:
user@syncope.apache.org<ma...@syncope.apache.org> <us...@syncope.apache.org>
Hi Again,
I’m still not seeing members in the group within the synced realm after the pull and the push is of course not working because internally in syncope the group has no members.
Would is be possible to have a zoom call to show what I’ve got and what behaviour I’m seeing?
Appreciate this may be outside the realms of evaluation support but likely it’s significantly quicker to have a quick show and tell than to have a back and forth over email.
Please let me know.
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Naaman Hart
Sent: 02 September 2019 10:28
To: user@syncope.apache.org<ma...@syncope.apache.org>
Subject: RE: Group Sync with Member
Hi Alireza,
Does it also need an equivalent push action?
I’m using Syncope to sync from one AD into another. Syncope is purely acting as the intermediary.
I added the pull action ‘ADMembershipPullActions’ which uses LDAPMembershipPullActions.
I added that to the pull task as below.
[cid:image025.jpg@01D56335.ECD95420]
Group membership however doesn’t appear to be populating.
[cid:image026.jpg@01D56335.ECD95420]
Do I need to map the member attribute to something internally?
If I view the source AD resource I only see __NAME__, __UID__ and sAMAccountName.
I couldn’t see an internal mapping to use to match member/members against.
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: alireza ranjbaran <ra...@gmail.com>>
Sent: 31 August 2019 07:36
To: user@syncope.apache.org<ma...@syncope.apache.org>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Hi,
To fetch group members you should use PullActions:
http://syncope.apache.org/docs/2.1/reference-guide.html#pullactions
For AD it has been developed by syncope team:
https://github.com/apache/syncope/blob/syncope-2.1.4/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/pushpull/ADMembershipPullActions.java
Go to Syncope Console > Configuration > Implementation > PULL_ACTION tab and add ADMembershipPullActions.
Then Go to defined AD resource and add it to your pull task.
It has same facility for membership propagation.
On Fri, Aug 30, 2019 at 2:26 PM Naaman Hart <na...@alfresco.com>> wrote:
Hi,
I’m trying to test syncing one AD to another via Syncope and I have groups syncing but with no members.
From reading your documentation I believe member syncing is possible.
I can’t see any mapping internal attributes for ‘member’ so I can’t map it. Is it natively grabbed and something is incorrect with my configuration or is it not possible?
[cid:image027.jpg@01D56335.ECD95420]
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
[cid:image028.png@01D56335.ECD95420]<https://www.alfresco.com/>[cid:image029.png@01D56335.ECD95420]<https://twitter.com/alfresco> [cid:image030.png@01D56335.ECD95420] <https://www.facebook.com/alfrescosoftware/> [cid:image031.png@01D56335.ECD95420] <https://www.linkedin.com/company/alfresco> [cid:image032.png@01D56335.ECD95420] <https://www.youtube.com/c/alfresco> [cid:image033.png@01D56335.ECD95420] <https://www.glassdoor.co.uk/Overview/Working-at-Alfresco-Software-EI_IE404506.11,28.htm>
[cid:image034.png@01D56335.ECD95420]
--
Best Regards,
Alireza Ranjbaran
IT Security Engineer
--
Fabio Martelli
Tel +393204726071
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa S.r.l.
Viale Vittoria Colonna 97 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173
http://www.tirasa.net
--
Fabio Martelli
Tel +393204726071
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa S.r.l.
Viale Vittoria Colonna 97 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173
http://www.tirasa.net
--
Fabio Martelli
Tel +393204726071
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html
Tirasa S.r.l.
Viale Vittoria Colonna 97 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173
http://www.tirasa.net
RE: Group Sync with Member
Posted by Naaman Hart <na...@alfresco.com>.
Hi Again,
I’m still not seeing members in the group within the synced realm after the pull and the push is of course not working because internally in syncope the group has no members.
Would is be possible to have a zoom call to show what I’ve got and what behaviour I’m seeing?
Appreciate this may be outside the realms of evaluation support but likely it’s significantly quicker to have a quick show and tell than to have a back and forth over email.
Please let me know.
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: Naaman Hart
Sent: 02 September 2019 10:28
To: user@syncope.apache.org
Subject: RE: Group Sync with Member
Hi Alireza,
Does it also need an equivalent push action?
I’m using Syncope to sync from one AD into another. Syncope is purely acting as the intermediary.
I added the pull action ‘ADMembershipPullActions’ which uses LDAPMembershipPullActions.
I added that to the pull task as below.
[cid:image001.jpg@01D56196.B2E0C000]
Group membership however doesn’t appear to be populating.
[cid:image003.jpg@01D56196.B2E0C000]
Do I need to map the member attribute to something internally?
If I view the source AD resource I only see __NAME__, __UID__ and sAMAccountName.
I couldn’t see an internal mapping to use to match member/members against.
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: alireza ranjbaran <ra...@gmail.com>>
Sent: 31 August 2019 07:36
To: user@syncope.apache.org<ma...@syncope.apache.org>
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Hi,
To fetch group members you should use PullActions:
http://syncope.apache.org/docs/2.1/reference-guide.html#pullactions
For AD it has been developed by syncope team:
https://github.com/apache/syncope/blob/syncope-2.1.4/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/pushpull/ADMembershipPullActions.java
Go to Syncope Console > Configuration > Implementation > PULL_ACTION tab and add ADMembershipPullActions.
Then Go to defined AD resource and add it to your pull task.
It has same facility for membership propagation.
On Fri, Aug 30, 2019 at 2:26 PM Naaman Hart <na...@alfresco.com>> wrote:
Hi,
I’m trying to test syncing one AD to another via Syncope and I have groups syncing but with no members.
From reading your documentation I believe member syncing is possible.
I can’t see any mapping internal attributes for ‘member’ so I can’t map it. Is it natively grabbed and something is incorrect with my configuration or is it not possible?
[cid:image005.jpg@01D56196.B2E0C000]
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
[cid:image007.png@01D56196.B2E0C000]<https://www.alfresco.com/>[cid:image009.png@01D56196.B2E0C000]<https://twitter.com/alfresco> [cid:image011.png@01D56196.B2E0C000] <https://www.facebook.com/alfrescosoftware/> [cid:image013.png@01D56196.B2E0C000] <https://www.linkedin.com/company/alfresco> [cid:image015.png@01D56196.B2E0C000] <https://www.youtube.com/c/alfresco> [cid:image017.png@01D56196.B2E0C000] <https://www.glassdoor.co.uk/Overview/Working-at-Alfresco-Software-EI_IE404506.11,28.htm>
[cid:image018.png@01D56196.B2E0C000]
--
Best Regards,
Alireza Ranjbaran
IT Security Engineer
RE: Group Sync with Member
Posted by Naaman Hart <na...@alfresco.com>.
Hi Alireza,
Does it also need an equivalent push action?
I’m using Syncope to sync from one AD into another. Syncope is purely acting as the intermediary.
I added the pull action ‘ADMembershipPullActions’ which uses LDAPMembershipPullActions.
I added that to the pull task as below.
[cid:image002.jpg@01D56179.1B50E0C0]
Group membership however doesn’t appear to be populating.
[cid:image004.jpg@01D56179.1B50E0C0]
Do I need to map the member attribute to something internally?
If I view the source AD resource I only see __NAME__, __UID__ and sAMAccountName.
I couldn’t see an internal mapping to use to match member/members against.
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
From: alireza ranjbaran <ra...@gmail.com>
Sent: 31 August 2019 07:36
To: user@syncope.apache.org
Subject: Re: Group Sync with Member
CAUTION: EXTERNAL MESSAGE
Hi,
To fetch group members you should use PullActions:
http://syncope.apache.org/docs/2.1/reference-guide.html#pullactions
For AD it has been developed by syncope team:
https://github.com/apache/syncope/blob/syncope-2.1.4/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/pushpull/ADMembershipPullActions.java
Go to Syncope Console > Configuration > Implementation > PULL_ACTION tab and add ADMembershipPullActions.
Then Go to defined AD resource and add it to your pull task.
It has same facility for membership propagation.
On Fri, Aug 30, 2019 at 2:26 PM Naaman Hart <na...@alfresco.com>> wrote:
Hi,
I’m trying to test syncing one AD to another via Syncope and I have groups syncing but with no members.
From reading your documentation I believe member syncing is possible.
I can’t see any mapping internal attributes for ‘member’ so I can’t map it. Is it natively grabbed and something is incorrect with my configuration or is it not possible?
[cid:image006.jpg@01D56179.1B50E0C0]
Naaman Hart
Cloud DevOps Architect, Strategic Programs
Mobile: +44 (0) 7733 107459
[cid:image008.png@01D56179.1B50E0C0]<https://www.alfresco.com/>[cid:image010.png@01D56179.1B50E0C0]<https://twitter.com/alfresco> [cid:image012.png@01D56179.1B50E0C0] <https://www.facebook.com/alfrescosoftware/> [cid:image014.png@01D56179.1B50E0C0] <https://www.linkedin.com/company/alfresco> [cid:image016.png@01D56179.1B50E0C0] <https://www.youtube.com/c/alfresco> [cid:image027.png@01D56179.1B50E0C0] <https://www.glassdoor.co.uk/Overview/Working-at-Alfresco-Software-EI_IE404506.11,28.htm>
[cid:image028.png@01D56179.1B50E0C0]
--
Best Regards,
Alireza Ranjbaran
IT Security Engineer
Re: Group Sync with Member
Posted by Francesco Chicchiriccò <il...@apache.org>.
Hi,
a blog post of some time ago, on the topic of working with Active
Directory:
https://www.tirasa.net/en/blog/syncope-basics-manage-active-directory
Regards.
On 2019-08-31 08:35 alireza ranjbaran wrote:
> Hi,
>
> To fetch group members you should use PullActions:
> http://syncope.apache.org/docs/2.1/reference-guide.html#pullactions
>
> For AD it has been developed by syncope team:
> https://github.com/apache/syncope/blob/syncope-2.1.4/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/pushpull/ADMembershipPullActions.java
>
> Go to Syncope Console > Configuration > Implementation > PULL_ACTION tab and add ADMembershipPullActions.
> Then Go to defined AD resource and add it to your pull task.
>
> It has same facility for membership propagation.
>
> On Fri, Aug 30, 2019 at 2:26 PM Naaman Hart <na...@alfresco.com> wrote:
>
>> Hi,
>>
>> I'm trying to test syncing one AD to another via Syncope and I have groups syncing but with no members.
>>
>> From reading your documentation I believe member syncing is possible.
>>
>> I can't see any mapping internal attributes for 'member' so I can't map it. Is it natively grabbed and something is incorrect with my configuration or is it not possible?
--
Francesco Chicchiriccò
Tirasa - Open Source Excellence
http://www.tirasa.net/
Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/
Re: Group Sync with Member
Posted by alireza ranjbaran <ra...@gmail.com>.
Hi,
To fetch group members you should use PullActions:
http://syncope.apache.org/docs/2.1/reference-guide.html#pullactions
For AD it has been developed by syncope team:
https://github.com/apache/syncope/blob/syncope-2.1.4/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/pushpull/ADMembershipPullActions.java
Go to Syncope Console > Configuration > Implementation > PULL_ACTION tab
and add ADMembershipPullActions.
Then Go to defined AD resource and add it to your pull task.
It has same facility for membership propagation.
On Fri, Aug 30, 2019 at 2:26 PM Naaman Hart <na...@alfresco.com>
wrote:
> Hi,
>
>
>
> I’m trying to test syncing one AD to another via Syncope and I have groups
> syncing but with no members.
>
> From reading your documentation I believe member syncing is possible.
>
>
>
> I can’t see any mapping internal attributes for ‘member’ so I can’t map
> it. Is it natively grabbed and something is incorrect with my
> configuration or is it not possible?
>
>
>
>
>
> *Naaman Hart*
>
> Cloud DevOps Architect, Strategic Programs
>
> Mobile: +44 (0) 7733 107459
>
> <https://www.alfresco.com/> <https://twitter.com/alfresco>
> <https://www.facebook.com/alfrescosoftware/>
> <https://www.linkedin.com/company/alfresco>
> <https://www.youtube.com/c/alfresco>
> <https://www.glassdoor.co.uk/Overview/Working-at-Alfresco-Software-EI_IE404506.11,28.htm>
>
>
>
--
*Best Regards,*
*Alireza Ranjbaran*
*IT Security Engineer*