Project

General

Profile

Actions
Copy link

Defect #1594

closed

Workflow for synchronization of ldap/ad groups creates wrong script in system mapping

Added by Alena Peterová over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Patrik Stloukal
Category:
Workflow
Target version:
Pyrite (9.5.1)
Start date:
04/02/2019
Due date:
% Done:

100%

Estimated time:
Affected versions:
Owner:

Description

Affected versions: 9.4, 9.5
The workflow syncRoleLdap in acc module, which is used for synchronization of groups, creates roles with wrong configuration - the script "transform to" contains e.g. "[cn=group1,dc=test,dc=tld]". The square brackets shouldn't be there; there must be only distinguished name of the group.

Actions
Copy link
 #2

Updated by Vít Švanda over 5 years ago

  • Assignee changed from Vít Švanda to Patrik Stloukal
Actions
Copy link
 #3

Updated by Alena Peterová over 5 years ago

How to fix on affected versions without upgrade:

A) Copy the workflow to some external location, fix it there, add the path to spring.activiti.processDefinitionLocationPrefix (https://wiki.czechidm.com/devel/documentation/application_configuration/dev/backend?s[]=template#activiti_workflow).
The workflow will be updated automatically after restart.

B) Copy the workflow, rename it (code and name), fix it, deploy it to IdM from GUI. Change the configuration of Synchronization to this workflow.

Problematic line:
execution.setVariable("transformationScript", MessageFormat.format(" \"[{0}]\"", distinguishedName));

Actions
Copy link
 #4

Updated by Patrik Stloukal over 5 years ago

  • Status changed from New to Needs feedback
  • Assignee changed from Patrik Stloukal to Ondřej Kopr
  • % Done changed from 0 to 90

i deleted bracets and made test for it.
Please could you lokk on it and write feedback?

commit: https://github.com/bcvsolutions/CzechIdMng/commit/b6e1ae39cf9f69ff187813d4e0ee16028fbc6444

Actions
Copy link
 #5

Updated by Ondřej Kopr over 5 years ago

  • Status changed from Needs feedback to Resolved
  • Assignee changed from Ondřej Kopr to Patrik Stloukal
  • Target version set to Pyrite (9.5.1)
  • % Done changed from 90 to 100

I checked you changes and seems ok. Thanks for fix. Branch was merged into develop and hotfix branch 9.5.1. Thank you.

Actions
Copy link
 #6

Updated by Ondřej Kopr over 5 years ago

  • Subject changed from Workflow for synchronization of groups creates wrong roles to Workflow for synchronization of ldap/ad groups creates wrong script in system mapping
Actions
Copy link
 #7

Updated by Radek Tomiška over 5 years ago

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: Atom PDF