[prev in list] [next in list] [prev in thread] [next in thread]
List: forgerock-openidm
Subject: Re: [OpenIDM] Prevent duplicate user IDs in OpenDJ, what's the best way?
From: Odd Beck <oddbeck () gmail ! com>
Date: 2016-06-28 19:49:33
Message-ID: CAKjv1x6qewODuzTEFMKUOU9_qyPBvMnt3_9X2mcjvnWGBDi-4g () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Ok, thank you! When I requested the list of all the ids then I got the
correct IDs.
I thought that the "ID" for "managed/user" would be the username, but it's
obviously not that as it was something looking like a GUID :)
Thanks again!
On Tue, Jun 28, 2016 at 9:39 PM, Cyril Grosjean <
cyril.grosjean@forgerock.com> wrote:
> I guess you meant _id rather than id, right ? Are you sure of your _id
> values ? Try a REST request to list them all
> (..../user?_queryId=query-all-ids)
>
>
> Le mardi 28 juin 2016, Odd Beck <oddbeck@gmail.com> a écrit :
>
>> Am I correct when I assume that openidm.read() only can read from the
>> source and never the target destination?
>>
>> in my mysql -> managed/user mapping I was able to get a mysql-object
>> using
>> openidm.read("system/mysql/__ACCOUNT__/" + id), but when I tried to do
>> openidm.read("managed/user/" +id) then it was never able to find it in
>> the target.
>>
>> Best regards
>>
>> Odd Beck
>>
>> On Tue, Jun 28, 2016 at 2:53 PM, Patrick von der Hagen <
>> patrick.hagen@kit.edu> wrote:
>>
>>> Am 28.06.2016 um 14:38 schrieb Odd Beck:
>>> > I have tried to do openidm.read() in a transformation script but I've
>>> > failed.
>>> >
>>> > Does "openidm.read()" work properly in a transformation script? I'm
>>> > unable to get any data from both "managed/user/<userID>" and
>>> > "system/opendj/account/....uid=...."
>>> I suppose it should work, but I'd perfer to put the code in the
>>> onCreate-script and can confirm that openidm.read works in those scripts
>>> (onCreate, onUpdate,...).
>>>
>>> But to create the managed/user-object, you already need a unique id, so
>>> you can obviously construct a DN in a unique manner anyway. You are
>>> likely to run into lots of trouble (people marrying, divorcing,...) when
>>> putting names into DNs. And don't forget the group-objects you have to
>>> keep in sync when using member-references.
>>>
>>>
>>>
>>> --
>>> Karlsruher Institut für Technologie (KIT)
>>> Steinbuch Centre for Computing (SCC)
>>>
>>> Patrick von der Hagen
>>>
>>> Zirkel 2, Gebäude 20.21, Raum 004.2
>>> 76131 Karlsruhe
>>> Telefon: +49 721 608-46433
>>> E-Mail: hagen@kit.edu
>>> Web: http://www.scc.kit.edu
>>>
>>> KIT – Die Forschungsuniversität in der Helmholtz-Gemeinschaft
>>>
>>>
>>> _______________________________________________
>>> OpenIDM mailing list
>>> OpenIDM@forgerock.org
>>> https://lists.forgerock.org/mailman/listinfo/openidm
>>>
>>>
>>
>
> --
> [image: ForgeRock] <http://www.forgerock.com/>
>
> <https://summits.forgerock.com/> *Cyril Grosjean*
> Senior Sales Consultant | ForgeRock
> *t* (+33) 685-599-481 | *e* cyril.grosjean@forgerock.com
> <firstname.lastname@forgerock.com>
> *skype* grosjeancyril | *web* www.forgerock.com
>
>
> <http://www.forgerock.com/>
>
>
> _______________________________________________
> OpenIDM mailing list
> OpenIDM@forgerock.org
> https://lists.forgerock.org/mailman/listinfo/openidm
>
>
[Attachment #5 (text/html)]
<div dir="ltr">Ok, thank you! When I requested the list of all the ids then I got the \
correct IDs.<br><br>I thought that the "ID" for "managed/user" \
would be the username, but it's obviously not that as it was something looking \
like a GUID :)<div><br></div><div>Thanks again!</div></div><div \
class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 28, 2016 at 9:39 PM, \
Cyril Grosjean <span dir="ltr"><<a href="mailto:cyril.grosjean@forgerock.com" \
target="_blank">cyril.grosjean@forgerock.com</a>></span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex">I guess you meant _id rather than id, right ? Are you sure of \
your _id values ? Try a REST request to list them all \
(..../user?_queryId=query-all-ids)<div class="HOEnZb"><div class="h5"><br><br>Le \
mardi 28 juin 2016, Odd Beck <<a href="mailto:oddbeck@gmail.com" \
target="_blank">oddbeck@gmail.com</a>> a écrit :<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr">Am I correct when I assume that openidm.read() \
only can read from the source and never the target destination?<div><br></div><div>in \
my mysql -> managed/user mapping I was able to get a mysql-object using \
<br>openidm.read("system/mysql/__ACCOUNT__/" + id), but when I tried to do \
<br>openidm.read("managed/user/" +id) then it was never able to find it in \
the target.</div><div><br></div><div>Best regards</div><div><br></div><div>Odd \
Beck</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 28, \
2016 at 2:53 PM, Patrick von der Hagen <span \
dir="ltr"><<a>patrick.hagen@kit.edu</a>></span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><span>Am 28.06.2016 um 14:38 schrieb Odd Beck:<br> > I \
have tried to do openidm.read() in a transformation script but I've<br> > \
failed.<br> ><br>
> Does "openidm.read()" work properly in a transformation script? \
I'm<br> > unable to get any data from both \
"managed/user/<userID>" and<br> > \
"system/opendj/account/....uid=...."<br> </span>I suppose it should work, \
but I'd perfer to put the code in the<br> onCreate-script and can confirm that \
openidm.read works in those scripts<br> (onCreate, onUpdate,...).<br>
<br>
But to create the managed/user-object, you already need a unique id, so<br>
you can obviously construct a DN in a unique manner anyway. You are<br>
likely to run into lots of trouble (people marrying, divorcing,...) when<br>
putting names into DNs. And don't forget the group-objects you have to<br>
keep in sync when using member-references.<br>
<br>
<br>
<br>
--<br>
Karlsruher Institut für Technologie (KIT)<br>
Steinbuch Centre for Computing (SCC)<br>
<br>
Patrick von der Hagen<br>
<br>
Zirkel 2, Gebäude 20.21, Raum 004.2<br>
76131 Karlsruhe<br>
Telefon: <a href="tel:%2B49%20721%20608-46433" value="+4972160846433" \
target="_blank">+49 721 608-46433</a><br>
E-Mail: <a>hagen@kit.edu</a><br>
Web: <a href="http://www.scc.kit.edu" rel="noreferrer" \
target="_blank">http://www.scc.kit.edu</a><br> <br>
KIT – Die Forschungsuniversität in der Helmholtz-Gemeinschaft<br>
<br>
<br>_______________________________________________<br>
OpenIDM mailing list<br>
<a>OpenIDM@forgerock.org</a><br>
<a href="https://lists.forgerock.org/mailman/listinfo/openidm" rel="noreferrer" \
target="_blank">https://lists.forgerock.org/mailman/listinfo/openidm</a><br> \
<br></blockquote></div><br></div> </blockquote><br><br></div></div><span \
class="HOEnZb"><font color="#888888">-- <br><div dir="ltr"><div><div \
dir="ltr"><div><div dir="ltr"><table border="0" cellspacing="0" cellpadding="0" \
style="font-family:Times"><tbody><tr><td valign="top"><a \
href="http://www.forgerock.com/" target="_blank"><img \
src="http://www.cyphondesign.com/clients/forgerock/signature/images/FR_Sig_Logo.png" \
width="185" height="70" border="0" alt="ForgeRock"></a><br><br><a \
href="https://summits.forgerock.com/" target="_blank"><img \
src="https://docs.google.com/uc?export=download&id=0B91UkNEQunNpTTR0dWxXOWNQdDA&revid=0B91UkNEQunNpdVdaalhrbWszTEduaFN0VXd5OFkzUU90MWRJPQ" \
width="200" height="69"></a></td><td valign="top" bgcolor="#ffffff" \
style="font-family:arial,helvetica,verdana,sans-serif;font-size:11px;color:rgb(47,52,56);line-height:18.15px;text-align:left"><strong>Cyril \
Grosjean</strong><br><font face="arial, helvetica, verdana, sans-serif" \
color="#2f3438">Senior Sales Consultant</font> | ForgeRock<br><span \
style="color:rgb(127,183,170)"><strong>t</strong></span> (+33) 685-599-481 | \
<span style="color:rgb(127,183,170)"><strong>e</strong></span> cyril.grosjean<a \
href="mailto:firstname.lastname@forgerock.com" \
style="text-decoration:none;color:rgb(47,52,56)" \
target="_blank">@forgerock.com</a><br><span \
style="color:rgb(127,183,170)"><strong>skype</strong></span> grosjeancyril | \
<span style="color:rgb(127,183,170)"><strong>web</strong></span> <a \
href="http://www.forgerock.com/" style="text-decoration:none;color:rgb(47,52,56)" \
target="_blank">www.forgerock.com</a><br><br><br><div><div dir="ltr"><table \
style="font-family:Times" border="0" cellpadding="0" cellspacing="0"><tbody><tr><td \
style="font-family:arial,helvetica,verdana,sans-serif;line-height:18.15px" \
bgcolor="#ffffff" valign="top" align="left"><a href="http://www.forgerock.com/" \
style="text-decoration:none;color:rgb(47,52,56)" \
target="_blank"></a></td></tr></tbody></table><br></div></div></td></tr></tbody></table></div></div></div></div></div><br>
</font></span><br>_______________________________________________<br>
OpenIDM mailing list<br>
<a href="mailto:OpenIDM@forgerock.org">OpenIDM@forgerock.org</a><br>
<a href="https://lists.forgerock.org/mailman/listinfo/openidm" rel="noreferrer" \
target="_blank">https://lists.forgerock.org/mailman/listinfo/openidm</a><br> \
<br></blockquote></div><br></div>
_______________________________________________
OpenIDM mailing list
OpenIDM@forgerock.org
https://lists.forgerock.org/mailman/listinfo/openidm
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic