diff --git a/grouper-midpoint/midpoint-objects/linux.properties b/grouper-midpoint/midpoint-objects/linux.properties new file mode 100644 index 0000000..5e9ae01 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/linux.properties @@ -0,0 +1,8 @@ +s-data.ldap.host=s-data +s-data.ldap.port=389 +s-data.db.host=s-data +s-data.db.port=3306 +i-data.ldap.host=i-data +i-data.ldap.port=389 +g-data.db.host=g-data +g-data.db.port=3306 diff --git a/grouper-midpoint/midpoint-objects/objectTemplates/template-org-course.xml b/grouper-midpoint/midpoint-objects/objectTemplates/template-org-course.xml new file mode 100644 index 0000000..4eafd08 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/objectTemplates/template-org-course.xml @@ -0,0 +1,18 @@ + + + template-org-course + + strong + + + RoleType + 8aa99e7b-f7d3-4585-9800-14bab4d26a43 + + + + assignment + + + + \ No newline at end of file diff --git a/grouper-midpoint/midpoint-objects/objectTemplates/template-org-department.xml b/grouper-midpoint/midpoint-objects/objectTemplates/template-org-department.xml new file mode 100644 index 0000000..df9b223 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/objectTemplates/template-org-department.xml @@ -0,0 +1,18 @@ + + + template-org-department + + strong + + + RoleType + ffa9eaec-9539-4d15-97aa-24cd5b92ca5b + + + + assignment + + + + \ No newline at end of file diff --git a/grouper-midpoint/midpoint-objects/objectTemplates/template-role-affiliation.xml b/grouper-midpoint/midpoint-objects/objectTemplates/template-role-affiliation.xml new file mode 100644 index 0000000..3a9c726 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/objectTemplates/template-role-affiliation.xml @@ -0,0 +1,17 @@ + + + template-role-affiliation + + strong + + + RoleType + fecae27b-d1d3-40ae-95fa-8f7e44e2ee70 + + + + assignment + + + \ No newline at end of file diff --git a/grouper-midpoint/midpoint-objects/objectTemplates/template-role-generic-group.xml b/grouper-midpoint/midpoint-objects/objectTemplates/template-role-generic-group.xml new file mode 100644 index 0000000..1205f6d --- /dev/null +++ b/grouper-midpoint/midpoint-objects/objectTemplates/template-role-generic-group.xml @@ -0,0 +1,17 @@ + + + template-role-generic-group + + strong + + + RoleType + c691e15a-f30b-4e15-8445-532db07ceeeb + + + + assignment + + + \ No newline at end of file diff --git a/grouper-midpoint/midpoint-objects/orgs/org-courses.xml b/grouper-midpoint/midpoint-objects/orgs/org-courses.xml new file mode 100644 index 0000000..71d1f7e --- /dev/null +++ b/grouper-midpoint/midpoint-objects/orgs/org-courses.xml @@ -0,0 +1,6 @@ + + + courses + Courses + \ No newline at end of file diff --git a/grouper-midpoint/midpoint-objects/orgs/org-departments.xml b/grouper-midpoint/midpoint-objects/orgs/org-departments.xml new file mode 100644 index 0000000..5320c1e --- /dev/null +++ b/grouper-midpoint/midpoint-objects/orgs/org-departments.xml @@ -0,0 +1,6 @@ + + + departments + Departments + \ No newline at end of file diff --git a/grouper-midpoint/midpoint-objects/resources/ldap-edu.xml b/grouper-midpoint/midpoint-objects/resources/ldap-edu.xml new file mode 100644 index 0000000..324dab2 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/resources/ldap-edu.xml @@ -0,0 +1,418 @@ + + + + + + + + + OpenLDAP edu (s-data) + + + + + c:connectorType + com.evolveum.polygon.connector.ldap.LdapConnector + + + + + + + $(s-data.ldap.port) + $(s-data.ldap.host) + dc=internet2,dc=edu + cn=Directory Manager + + password + + nsUniqueId + auto + uid + memberOf + createTimestamp + nsAccountLock + + + + + false + false + false + + + + + + ri:inetOrgPerson + ri:eduPerson + ri:groupOfUniqueNames + ri:groupOfNames + ri:organizationalUnit + + + + + + account + Normal Account + true + ri:inetOrgPerson + ri:eduPerson + + ri:dn + Distinguished Name + + 0 + + mr:stringIgnoreCase + + + extension/ldap_dn + + + + strong + + + RoleType + c89f31dd-8d4f-4e0a-82cb-58ff9d8c1b2f + + grouper-basic + + + + + assignment + + + + + + + + + + ri:cn + Common Name + + 0 + + + + fullName + + + + + ri:sn + Surname + + 0 + + + + familyName + + + + + ri:givenName + Given Name + + + givenName + + + + + ri:uid + Login Name + mr:stringIgnoreCase + + + name + + + + + ri:mail + Mail + mr:stringIgnoreCase + + + emailAddress + + + + + ri:employeeNumber + + + employeeNumber + + + + + ri:businessCategory + + strong + + + OrgType + + + name + + + + + + true + + + + + + + name + + + + + + + + displayName + + + + + + OrgType + bee44c51-2469-411d-bac7-695728e9c241 + + + + assignment + + + + + + + + identifier + + + + + department + + + subtype + + + + + department + + + + + assignment + + + + + + + + + + ri:eduPersonAffiliation + + strong + + + RoleType + + + name + + + + + + true + + + + + + + name + + + + + + + + displayName + + + + + + + + identifier + + + + + affiliation + + + subtype + + + + + affiliation + + + + + assignment + + + + + + + + + + + + http://prism.evolveum.com/xml/ns/public/matching-rule-3#stringIgnoreCase + attributes/ri:dn + cn=root,dc=internet2,dc=edu + + + + + + + + + + true + + + + name + + + declare namespace ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"; + $account/attributes/ri:uid + + + + + + + linked + true + + + deleted + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink + + + + unlinked + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#link + + + + unmatched + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus + + + + + + + + diff --git a/grouper-midpoint/midpoint-objects/resources/ldap-grouper.xml b/grouper-midpoint/midpoint-objects/resources/ldap-grouper.xml new file mode 100644 index 0000000..e8b883e --- /dev/null +++ b/grouper-midpoint/midpoint-objects/resources/ldap-grouper.xml @@ -0,0 +1,432 @@ + + + + + + + + + OpenLDAP for Grouper (i-data) + + + + + c:connectorType + com.evolveum.polygon.connector.ldap.LdapConnector + + + + + + + $(i-data.ldap.port) + $(i-data.ldap.host) + dc=internet2,dc=edu + cn=Directory Manager + + password + + nsUniqueId + auto + uid + memberOf + createTimestamp + nsAccountLock + + + + + false + false + false + + + + + + ri:inetOrgPerson + ri:eduPerson + ri:groupOfUniqueNames + ri:groupOfNames + ri:organizationalUnit + + + + + + account + Normal Account + true + ri:inetOrgPerson + ri:eduPerson + + ri:dn + Distinguished Name + + 0 + + mr:stringIgnoreCase + + + extension/ldap_dn + + + + + ri:cn + Common Name + + 0 + + + + fullName + + + + + ri:sn + Surname + + 0 + + + + familyName + + + + + ri:givenName + Given Name + + + givenName + + + + + ri:uid + Login Name + mr:stringIgnoreCase + + + name + + + + + ri:mail + Mail + mr:stringIgnoreCase + + + emailAddress + + + + + ri:employeeNumber + + + employeeNumber + + + + + ri:businessCategory + false + + + ri:eduPersonAffiliation + false + + + false + ri:courseGroup + Course-related groups membership + entitlement + course-group + objectToSubject + ri:uniqueMember + ri:dn + + + false + ri:genericGroup + Generic groups membership + entitlement + generic-group + objectToSubject + ri:uniqueMember + ri:dn + + + + + http://prism.evolveum.com/xml/ns/public/matching-rule-3#stringIgnoreCase + attributes/ri:dn + cn=root,dc=internet2,dc=edu + + + + + + + + + + + + + + + + entitlement + course-group + LDAP Group for courses + ri:groupOfUniqueNames + + ri:uniqueMember + mr:distinguishedName + minimal + + + ri:dn + mr:stringIgnoreCase + + strong + + identifier + + + + + + + + ri:cn + mr:stringIgnoreCase + + weak + + identifier + + + + + + entitlement + generic-group + LDAP Group + ri:groupOfUniqueNames + + ri:uniqueMember + mr:distinguishedName + minimal + + + ri:dn + mr:stringIgnoreCase + + strong + true + + identifier + + + + + + + + ri:cn + mr:stringIgnoreCase + + weak + + identifier + + + + + + + + + true + + + name + + + declare namespace ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"; + $account/attributes/ri:uid + + + + + + linked + true + + + deleted + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink + + + + unlinked + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#link + + + + unmatched + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus + + + + + course-group sync + ri:groupOfUniqueNames + entitlement + course-group + OrgType + true + + + + + + + identifier + + $shadow/attributes/ri:cn + + + + subtype + course + + + + + linked + true + + + deleted + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink + + + + unlinked + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#link + + + + unmatched + + + + generic-group sync + ri:groupOfUniqueNames + entitlement + generic-group + RoleType + true + + + + + + + identifier + + $shadow/attributes/ri:cn + + + + subtype + generic-group + + + + + linked + true + + + deleted + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink + + + + unlinked + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#link + + + + unmatched + + + + + true + + + diff --git a/grouper-midpoint/midpoint-objects/resources/scriptedsql-grouper.xml b/grouper-midpoint/midpoint-objects/resources/scriptedsql-grouper.xml new file mode 100644 index 0000000..0405261 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/resources/scriptedsql-grouper.xml @@ -0,0 +1,129 @@ + + + + + Grouper SQL + + + + + connectorType + net.tirasa.connid.bundles.db.scriptedsql.ScriptedSQLConnector + + + + + + + + $(g-data.db.host) + $(g-data.db.port) + + root + + + + grouper + + GROOVY + + /opt/midpoint/var/res/grouper/SearchScript.groovy + /opt/midpoint/var/res/grouper/TestScript.groovy + /opt/midpoint/var/res/grouper/SchemaScript.groovy + + true + + + + + + org.mariadb.jdbc.Driver + jdbc:mysql://%h:%p/%d?useUnicode=true&characterEncoding=utf8&connectionCollation=utf8_bin + true + true + false + false + + + + + + + + + + + account + Normal Account + true + ri:AccountObjectClass + + ri:subject_id + Subject ID + + + ri:subject_identifier0 + Subject Identifier + + + ri:name + Name + + + + + + + + + diff --git a/grouper-midpoint/midpoint-objects/resources/scriptedsql-sis-courses.xml b/grouper-midpoint/midpoint-objects/resources/scriptedsql-sis-courses.xml new file mode 100644 index 0000000..caf6afd --- /dev/null +++ b/grouper-midpoint/midpoint-objects/resources/scriptedsql-sis-courses.xml @@ -0,0 +1,212 @@ + + + + + SQL SIS courses (s-data) + + + + + connectorType + net.tirasa.connid.bundles.db.scriptedsql.ScriptedSQLConnector + + + + + + + + $(s-data.db.host) + $(s-data.db.port) + + root + + + + grouper + + GROOVY + + /opt/midpoint/var/res/sis/SearchScript.groovy + /opt/midpoint/var/res/sis/TestScript.groovy + /opt/midpoint/var/res/sis/SchemaScript.groovy + + true + + + + + + org.mariadb.jdbc.Driver + jdbc:mysql://%h:%p/%d?useUnicode=true&characterEncoding=utf8&connectionCollation=utf8_bin + true + true + false + false + + + + + + + + + + + account + Normal Account + true + ri:AccountObjectClass + + ri:uid + UID + + + ri:courseId + Course ID + + strong + + + OrgType + + + name + + + + + + true + + + + + + + name + + + + + + + + displayName + + + + + + OrgType + 225e9360-0639-40ba-8a31-7f31bef067be + + + + assignment + + + + + + + + identifier + + + + + course + + + subtype + + + + + course + + + + + assignment + + + + + + + + + + + + + + true + + + + name + + + declare namespace ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"; + $account/attributes/ri:uid + + + + + + + linked + true + + + deleted + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink + + + + + unlinked + true + + http://midpoint.evolveum.com/xml/ns/public/model/action-3#link + + + + unmatched + true + + + + + + + diff --git a/grouper-midpoint/midpoint-objects/roles/metarole-affiliation.xml b/grouper-midpoint/midpoint-objects/roles/metarole-affiliation.xml new file mode 100644 index 0000000..be64d72 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/roles/metarole-affiliation.xml @@ -0,0 +1,29 @@ + + metarole-affiliation + + + + + ri:eduPersonAffiliation + + strong + + + + + + + 2 + + diff --git a/grouper-midpoint/midpoint-objects/roles/metarole-course.xml b/grouper-midpoint/midpoint-objects/roles/metarole-course.xml new file mode 100644 index 0000000..094f92f --- /dev/null +++ b/grouper-midpoint/midpoint-objects/roles/metarole-course.xml @@ -0,0 +1,38 @@ + + metarole-course + + + + entitlement + course-group + + + + + + + ri:courseGroup + + + + + entitlement + course-group + + + + + + + 2 + + diff --git a/grouper-midpoint/midpoint-objects/roles/metarole-department.xml b/grouper-midpoint/midpoint-objects/roles/metarole-department.xml new file mode 100644 index 0000000..96947e3 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/roles/metarole-department.xml @@ -0,0 +1,29 @@ + + metarole-department + + + + + ri:businessCategory + + strong + + + + + + + 2 + + diff --git a/grouper-midpoint/midpoint-objects/roles/metarole-generic-group.xml b/grouper-midpoint/midpoint-objects/roles/metarole-generic-group.xml new file mode 100644 index 0000000..3a6df91 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/roles/metarole-generic-group.xml @@ -0,0 +1,38 @@ + + metarole-generic-group + + + + entitlement + generic-group + + + + + + + ri:genericGroup + + + + + entitlement + generic-group + + + + + + + 2 + + diff --git a/grouper-midpoint/midpoint-objects/roles/role-grouper-basic.xml b/grouper-midpoint/midpoint-objects/roles/role-grouper-basic.xml new file mode 100644 index 0000000..c119b28 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/roles/role-grouper-basic.xml @@ -0,0 +1,18 @@ + + role-grouper-basic + + + + + 1 + + diff --git a/grouper-midpoint/midpoint-objects/roles/role-grouper-sysadmin.xml b/grouper-midpoint/midpoint-objects/roles/role-grouper-sysadmin.xml new file mode 100644 index 0000000..5b559f8 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/roles/role-grouper-sysadmin.xml @@ -0,0 +1,17 @@ + + role-grouper-sysadmin + + + + generic-group + sysadmingroup + diff --git a/grouper-midpoint/midpoint-objects/systemConfigurations/SystemConfiguration.xml b/grouper-midpoint/midpoint-objects/systemConfigurations/SystemConfiguration.xml new file mode 100644 index 0000000..146ee38 --- /dev/null +++ b/grouper-midpoint/midpoint-objects/systemConfigurations/SystemConfiguration.xml @@ -0,0 +1,167 @@ + + SystemConfiguration + + 2018-08-15T13:30:55.282+02:00 + 2018-08-15T13:30:55.372+02:00 + http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#init + + + 2018-08-15T13:30:55.562+02:00 + + + add + c:SystemConfigurationType + + + com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta + handled_error + 1000000000000000009 + Object of type 'SystemConfigurationType' with oid '00000000-0000-0000-0000-000000000001' was not found. + + SystemConfiguration + + handled_error + http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#init + + + + + ERROR + ro.isdc.wro.extensions.processor.css.Less4jProcessor + + + OFF + org.hibernate.engine.jdbc.spi.SqlExceptionHelper + + + OFF + org.hibernate.engine.jdbc.batch.internal.BatchingBatch + + + WARN + org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl + + + OFF + org.hibernate.internal.ExceptionMapperStandardImpl + + + OFF + net.sf.jasperreports.engine.fill.JRFillDataset + + + WARN + org.apache.wicket.resource.PropertiesFactory + + + ERROR + org.springframework.context.support.ResourceBundleMessageSource + + + INFO + com.evolveum.midpoint.model.impl.lens.projector.Projector + + + INFO + com.evolveum.midpoint.model.impl.lens.Clockwork + + + %date [%X{subsystem}] [%thread] %level \(%logger\): %msg%n + MIDPOINT_LOG + ${midpoint.home}/log/midpoint.log + ${midpoint.home}/log/midpoint-%d{yyyy-MM-dd}.%i.log + 10 + 100MB + true + + + %date %level: %msg%n + MIDPOINT_PROFILE_LOG + ${midpoint.home}/log/midpoint-profile.log + ${midpoint.home}/log/midpoint-profile-%d{yyyy-MM-dd}.%i.log + 10 + 100MB + true + + MIDPOINT_LOG + INFO + + false +
false
+ + + + RoleType + affiliation + + + + OrgType + department + + + + OrgType + course + + + + RoleType + generic-group + + + + + P3M + + + P1M + + + + true + + + + /self/profile + + View/edit your profile + + fa fa-user + + green + http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfProfile + http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll + + + /self/credentials + + View/edit your credentials + + fa fa-shield + + blue + http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfCredentials + http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll + + + /admin/users + + + fa fa-users + + red + http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#users + + + /admin/resources + + + fa fa-database + + purple + http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#resources + + true + + diff --git a/grouper-midpoint/midpoint-objects/windows.properties b/grouper-midpoint/midpoint-objects/windows.properties new file mode 100644 index 0000000..0ff8d7b --- /dev/null +++ b/grouper-midpoint/midpoint-objects/windows.properties @@ -0,0 +1,4 @@ +s-data.ldap.host=192.168.56.101 +s-data.ldap.port=1389 +i-data.ldap.host=192.168.56.101 +i-data.ldap.port=389 \ No newline at end of file