From 91bce9903446dc611fb3c32378ef9e41a6c660f7 Mon Sep 17 00:00:00 2001
From: Radovan Semancik <radovan.semancik@evolveum.com>
Date: Fri, 16 Sep 2016 16:18:54 +0200
Subject: [PATCH] Book samples

---
 samples/book/2/create-table-crm.sql     |  12 +
 samples/book/2/create-table-portal.sql  |   8 +
 samples/book/2/resource-crm.xml         | 153 +++++++
 samples/book/2/resource-csv-hr-bare.xml |  66 +++
 samples/book/2/resource-csv-hr.xml      | 180 ++++++++
 samples/book/2/resource-openldap.xml    | 531 ++++++++++++++++++++++++
 samples/book/2/resource-portal.xml      | 126 ++++++
 7 files changed, 1076 insertions(+)
 create mode 100644 samples/book/2/create-table-crm.sql
 create mode 100644 samples/book/2/create-table-portal.sql
 create mode 100644 samples/book/2/resource-crm.xml
 create mode 100644 samples/book/2/resource-csv-hr-bare.xml
 create mode 100644 samples/book/2/resource-csv-hr.xml
 create mode 100644 samples/book/2/resource-openldap.xml
 create mode 100644 samples/book/2/resource-portal.xml

diff --git a/samples/book/2/create-table-crm.sql b/samples/book/2/create-table-crm.sql
new file mode 100644
index 00000000000..8be2f8950f5
--- /dev/null
+++ b/samples/book/2/create-table-crm.sql
@@ -0,0 +1,12 @@
+
+CREATE TABLE crmusers (
+  userId             VARCHAR(16) NOT NULL,
+  password           VARCHAR(16) NOT NULL,
+  firstName	         VARCHAR(16),
+  lastName	         VARCHAR(16),
+  fullName           VARCHAR(32),
+  description        VARCHAR(256),
+  accessLevel        VARCHAR(256),
+  disabled           BOOLEAN,
+  PRIMARY KEY (userId)
+);
diff --git a/samples/book/2/create-table-portal.sql b/samples/book/2/create-table-portal.sql
new file mode 100644
index 00000000000..6dddad8ffa7
--- /dev/null
+++ b/samples/book/2/create-table-portal.sql
@@ -0,0 +1,8 @@
+
+CREATE TABLE portalusers (
+  login             VARCHAR(16) NOT NULL,
+  ldapDn			VARCHAR(128),
+  fullName           VARCHAR(32),
+  disabled           BOOLEAN,
+  PRIMARY KEY (login)
+);
diff --git a/samples/book/2/resource-crm.xml b/samples/book/2/resource-crm.xml
new file mode 100644
index 00000000000..1e586c8ab91
--- /dev/null
+++ b/samples/book/2/resource-crm.xml
@@ -0,0 +1,153 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2016 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<resource oid="04afeda6-394b-11e6-8cbe-abf7ff430056"
+    xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" 
+	xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" 
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+    xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+	xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"
+	xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
+	xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3"
+	xmlns:my="http://myself.me/schemas/whatever">
+
+   	<name>CRM</name>
+    
+	<connectorRef type="ConnectorType">
+		<filter>
+	        <q:equal>
+			<q:path>c:connectorType</q:path>
+	          <q:value>org.identityconnectors.databasetable.DatabaseTableConnector</q:value>
+	        </q:equal>
+	      </filter>
+	</connectorRef>
+
+	<connectorConfiguration>
+
+		<icfc:configurationProperties
+		xmlns:icscdbtable="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-databasetable/org.identityconnectors.databasetable.DatabaseTableConnector">
+			<icscdbtable:port>5432</icscdbtable:port>
+			<icscdbtable:host>localhost</icscdbtable:host>
+			<icscdbtable:user>crm</icscdbtable:user>
+			<icscdbtable:password><clearValue>qwe123</clearValue></icscdbtable:password>
+			<icscdbtable:database>crm</icscdbtable:database>
+			<icscdbtable:table>crmusers</icscdbtable:table>
+			<icscdbtable:keyColumn>userId</icscdbtable:keyColumn>
+			<icscdbtable:passwordColumn>password</icscdbtable:passwordColumn>
+			<icscdbtable:jdbcDriver>org.postgresql.Driver</icscdbtable:jdbcDriver>
+			<icscdbtable:jdbcUrlTemplate>jdbc:postgresql://%h:%p/%d</icscdbtable:jdbcUrlTemplate>
+			<icscdbtable:enableEmptyString>false</icscdbtable:enableEmptyString>
+			<icscdbtable:rethrowAllSQLExceptions>true</icscdbtable:rethrowAllSQLExceptions>
+			<icscdbtable:nativeTimestamps>false</icscdbtable:nativeTimestamps>
+			<icscdbtable:allNative>false</icscdbtable:allNative>
+		</icfc:configurationProperties>
+	
+	</connectorConfiguration>
+
+	<schemaHandling>
+
+		<objectType>
+			<displayName>Default Account</displayName>
+			<default>true</default>
+			<objectClass>ri:AccountObjectClass</objectClass>
+			<attribute>
+				<ref>icfs:uid</ref>
+				<displayName>User ID</displayName>
+				<limitations>
+					<access>
+						<read>true</read>
+					</access>
+				</limitations>
+			</attribute>
+			<attribute>
+				<ref>icfs:name</ref>
+				<displayName>Name</displayName>
+				<limitations>
+					<minOccurs>0</minOccurs>
+					<access>
+                           <read>true</read>
+						<add>true</add>
+						<modify>true</modify>
+					</access>
+				</limitations>
+				<outbound>
+					<source>
+						<path>$user/name</path>
+					</source>
+				</outbound>
+			</attribute>
+
+			<attribute>
+				<ref>ri:firstname</ref>
+				<displayName>First name</displayName>
+				<outbound>
+					<source>
+						<path>$user/givenName</path>
+					</source>
+				</outbound>
+						
+			</attribute>
+			<attribute>
+				<ref>ri:lastname</ref>
+				<displayName>Last name</displayName>
+				<outbound>
+					<source>
+						<path>$user/familyName</path>
+					</source>
+				</outbound>
+						
+			</attribute>
+			<attribute>
+				<ref>ri:fullname</ref>
+				<displayName>Full name</displayName>
+				<outbound>
+					<source>
+						<path>$user/fullName</path>
+					</source>
+				</outbound>
+			</attribute>
+			
+			<activation>
+				<administrativeStatus>
+					<outbound/>
+				</administrativeStatus>
+			</activation>
+			
+			<credentials>
+				<password>
+					<outbound/>
+				</password>
+			</credentials>
+			
+		</objectType>
+	</schemaHandling>
+
+	<capabilities xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
+		<configured>
+			<cap:activation>
+				<cap:status>
+					<cap:attribute>ri:disabled</cap:attribute>
+					<cap:enableValue></cap:enableValue>
+					<cap:enableValue>false</cap:enableValue>
+					<cap:disableValue>true</cap:disableValue>
+				</cap:status>
+			</cap:activation>
+		</configured>
+	</capabilities>
+
+</resource>
diff --git a/samples/book/2/resource-csv-hr-bare.xml b/samples/book/2/resource-csv-hr-bare.xml
new file mode 100644
index 00000000000..11ea82d942d
--- /dev/null
+++ b/samples/book/2/resource-csv-hr-bare.xml
@@ -0,0 +1,66 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2010-2016 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+
+<!--
+
+This file is an example of Resource definition. It defines CSV resource.
+
+-->
+<c:resource oid="03c3ceea-78e2-11e6-954d-dfdfa9ace0cf"
+			xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+			xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+			xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+			xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
+			xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"
+			xmlns:ext="http://midpoint.evolveum.com/xml/ns/story/orgsync/ext"
+			xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+			xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+			xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3">
+
+	<c:name>HR System</c:name>
+
+	<connectorRef type="ConnectorType">
+		<filter>
+			<q:equal>
+				<q:path>c:connectorType</q:path>
+				<q:value>com.evolveum.polygon.csvfile.CSVFileConnector</q:value>
+			</q:equal>
+		</filter>
+	</connectorRef>
+
+	<c:connectorConfiguration>
+
+		<!-- Configuration specific for the CSVfile connector -->
+		<icfc:configurationProperties
+					xmlns:icfccsvfile="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-csvfile/com.evolveum.polygon.csvfile.CSVFileConnector">
+			<icfccsvfile:filePath>/var/opt/midpoint-example/resources/hr.csv</icfccsvfile:filePath>
+			<icfccsvfile:encoding>utf-8</icfccsvfile:encoding>
+			<icfccsvfile:valueQualifier>"</icfccsvfile:valueQualifier>
+			<icfccsvfile:fieldDelimiter>,</icfccsvfile:fieldDelimiter>
+			<icfccsvfile:multivalueDelimiter>;</icfccsvfile:multivalueDelimiter>
+			<icfccsvfile:usingMultivalue>false</icfccsvfile:usingMultivalue>
+			<icfccsvfile:uniqueAttribute>id</icfccsvfile:uniqueAttribute>
+			<!--			<icfccsvfile:nameAttribute>id</icfccsvfile:nameAttribute> -->
+			<icfccsvfile:passwordAttribute>password</icfccsvfile:passwordAttribute>
+		</icfc:configurationProperties>
+
+
+	</c:connectorConfiguration>
+
+</c:resource>
+
diff --git a/samples/book/2/resource-csv-hr.xml b/samples/book/2/resource-csv-hr.xml
new file mode 100644
index 00000000000..f72acfe0fa1
--- /dev/null
+++ b/samples/book/2/resource-csv-hr.xml
@@ -0,0 +1,180 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2010-2016 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+
+<!--
+
+This file is an example of Resource definition. It defines CSV resource.
+
+-->
+<c:resource oid="03c3ceea-78e2-11e6-954d-dfdfa9ace0cf"
+			xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+			xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+			xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+			xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
+			xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"
+			xmlns:ext="http://midpoint.evolveum.com/xml/ns/story/orgsync/ext"
+			xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+			xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+			xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3">
+
+	<c:name>HR System</c:name>
+
+	<connectorRef type="ConnectorType">
+		<filter>
+			<q:equal>
+				<q:path>c:connectorType</q:path>
+				<q:value>com.evolveum.polygon.csvfile.CSVFileConnector</q:value>
+			</q:equal>
+		</filter>
+	</connectorRef>
+
+	<c:connectorConfiguration>
+
+		<!-- Configuration specific for the CSVfile connector -->
+		<icfc:configurationProperties
+					xmlns:icfccsvfile="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-csvfile/com.evolveum.polygon.csvfile.CSVFileConnector">
+			<icfccsvfile:filePath>/var/opt/midpoint-example/resources/hr.csv</icfccsvfile:filePath>
+			<icfccsvfile:encoding>utf-8</icfccsvfile:encoding>
+			<icfccsvfile:valueQualifier>"</icfccsvfile:valueQualifier>
+			<icfccsvfile:fieldDelimiter>,</icfccsvfile:fieldDelimiter>
+			<icfccsvfile:multivalueDelimiter>;</icfccsvfile:multivalueDelimiter>
+			<icfccsvfile:usingMultivalue>false</icfccsvfile:usingMultivalue>
+			<icfccsvfile:uniqueAttribute>id</icfccsvfile:uniqueAttribute>
+			<!--			<icfccsvfile:nameAttribute>id</icfccsvfile:nameAttribute> -->
+			<icfccsvfile:passwordAttribute>password</icfccsvfile:passwordAttribute>
+		</icfc:configurationProperties>
+
+
+	</c:connectorConfiguration>
+
+	<schemaHandling>
+
+		<objectType>
+			<displayName>Default Account</displayName>
+			<default>true</default>
+			<objectClass>ri:AccountObjectClass</objectClass>
+			<attribute>
+				<ref>icfs:uid</ref>
+				<displayName>ID</displayName>
+				<limitations>
+					<access>
+						<read>true</read>
+					</access>
+				</limitations>
+			</attribute>
+			<attribute>
+				<ref>icfs:name</ref>
+				<displayName>Name</displayName>
+				<limitations>
+					<minOccurs>0</minOccurs>
+					<access>
+						<read>true</read>
+						<add>true</add>
+						<modify>true</modify>
+					</access>
+				</limitations>
+				<inbound>
+					<target>
+						<path>$user/name</path>
+					</target>
+				</inbound>
+			</attribute>
+			<attribute>
+				<ref>ri:firstname</ref>
+				<displayName>First name</displayName>
+				<inbound>
+					<target>
+						<path>$user/givenName</path>
+					</target>
+				</inbound>
+
+			</attribute>
+			<attribute>
+				<ref>ri:lastname</ref>
+				<displayName>Last name</displayName>
+				<inbound>
+					<target>
+						<path>$user/familyName</path>
+					</target>
+				</inbound>
+			</attribute>
+			<activation>
+				<administrativeStatus>
+					<inbound/>
+				</administrativeStatus>
+			</activation>
+
+			<credentials>
+				<password>
+					<inbound>
+						<strength>weak</strength>
+						<expression>
+							<generate/>
+						</expression>
+					</inbound>
+				</password>
+			</credentials>
+
+		</objectType>
+
+	</schemaHandling>
+
+	<projection>
+		<assignmentPolicyEnforcement>none</assignmentPolicyEnforcement>
+	</projection>
+
+	<synchronization>
+		<objectSynchronization>
+			<enabled>true</enabled>
+			<correlation>
+				<q:equal>
+					<q:path>c:name</q:path>
+					<expression>
+						<path>$account/attributes/icfs:name</path>
+					</expression>
+				</q:equal>
+			</correlation>
+			<reaction>
+				<situation>linked</situation>
+				<synchronize>true</synchronize>
+			</reaction>
+			<reaction>
+				<situation>deleted</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#deleteFocus</handlerUri>
+				</action>
+			</reaction>
+			<reaction>
+				<situation>unlinked</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</handlerUri>
+				</action>
+			</reaction>
+			<reaction>
+				<situation>unmatched</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus</handlerUri>
+				</action>
+			</reaction>
+		</objectSynchronization>
+	</synchronization>
+</c:resource>
+
diff --git a/samples/book/2/resource-openldap.xml b/samples/book/2/resource-openldap.xml
new file mode 100644
index 00000000000..a87c0a58c35
--- /dev/null
+++ b/samples/book/2/resource-openldap.xml
@@ -0,0 +1,531 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2016 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<resource oid="b4101662-7902-11e6-9f14-53e18426fe81"
+	xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
+	xmlns:t='http://prism.evolveum.com/xml/ns/public/types-3' xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"
+	xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
+	xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3"
+	xmlns:my="http://whatever.com/my" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+	xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3"
+	xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
+
+	<name>LDAP</name>
+
+	<description>
+		LDAP resource using a ConnId LDAP connector. It contains configuration
+		for use with OpenLDAP servers.
+	</description>
+
+	<connectorRef type="ConnectorType">
+		<filter>
+			<q:equal>
+				<q:path>c:connectorType</q:path>
+				<q:value>com.evolveum.polygon.connector.ldap.LdapConnector</q:value>
+			</q:equal>
+		</filter>
+	</connectorRef>
+
+	<connectorConfiguration
+		xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3"
+		xmlns:icfcldap="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-ldap/com.evolveum.polygon.connector.ldap.LdapConnector">
+		<icfc:configurationProperties>
+			<icfcldap:port>389</icfcldap:port>
+			<icfcldap:host>localhost</icfcldap:host>
+			<icfcldap:baseContext>dc=example,dc=com</icfcldap:baseContext>
+			<icfcldap:bindDn>cn=idm,ou=Administrators,dc=example,dc=com</icfcldap:bindDn>
+			<icfcldap:bindPassword>
+				<t:clearValue>secret</t:clearValue>
+			</icfcldap:bindPassword>
+			<icfcldap:pagingStrategy>auto</icfcldap:pagingStrategy>
+			<icfcldap:passwordHashAlgorithm>SSHA</icfcldap:passwordHashAlgorithm>
+			<icfcldap:vlvSortAttribute>uid,cn,ou,dc</icfcldap:vlvSortAttribute>
+			<icfcldap:vlvSortOrderingRule>2.5.13.3</icfcldap:vlvSortOrderingRule>
+			<icfcldap:operationalAttributes>memberOf</icfcldap:operationalAttributes>
+			<icfcldap:operationalAttributes>createTimestamp</icfcldap:operationalAttributes>
+			<icfcldap:usePermissiveModify>always</icfcldap:usePermissiveModify>
+			<icfcldap:lockoutStrategy>openldap</icfcldap:lockoutStrategy>
+		</icfc:configurationProperties>
+		<icfc:resultsHandlerConfiguration>
+			<icfc:enableNormalizingResultsHandler>false</icfc:enableNormalizingResultsHandler>
+			<icfc:enableFilteredResultsHandler>false</icfc:enableFilteredResultsHandler>
+			<icfc:enableAttributesToGetSearchResultsHandler>false</icfc:enableAttributesToGetSearchResultsHandler>
+		</icfc:resultsHandlerConfiguration>
+	</connectorConfiguration>
+
+	<schemaHandling>
+		<objectType>
+			<kind>account</kind>
+			<displayName>Normal Account</displayName>
+			<default>true</default>
+			<objectClass>ri:inetOrgPerson</objectClass>
+			<attribute>
+				<ref>ri:dn</ref>
+				<displayName>Distinguished Name</displayName>
+				<limitations>
+					<minOccurs>0</minOccurs>
+					<access>
+						<read>true</read>
+						<add>true</add>
+						<modify>true</modify>
+					</access>
+				</limitations>
+				<outbound>
+					<source>
+						<path>$user/name</path>
+					</source>
+					<expression>
+						<script>
+							<code>
+								basic.composeDnWithSuffix('uid', name + iterationToken, 'ou=people,dc=example,dc=com')
+							</code>
+						</script>
+					</expression>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:entryUUID</ref>
+				<displayName>Entry UUID</displayName>
+				<limitations>
+					<access>
+						<read>true</read>
+						<add>false</add>
+						<modify>true</modify>
+					</access>
+				</limitations>
+			</attribute>
+			<attribute>
+				<ref>ri:cn</ref>
+				<displayName>Common Name</displayName>
+				<limitations>
+					<minOccurs>0</minOccurs>
+					<access>
+						<read>true</read>
+						<add>true</add>
+						<modify>true</modify>
+					</access>
+				</limitations>
+
+				<outbound>
+					<source>
+						<path>fullName</path>
+					</source>
+				</outbound>
+				<inbound>
+					<target>
+						<path>fullName</path>
+					</target>
+				</inbound>
+			</attribute>
+			<attribute>
+				<ref>ri:sn</ref>
+				<displayName>Surname</displayName>
+				<limitations>
+					<minOccurs>0</minOccurs>
+				</limitations>
+				<outbound>
+					<source>
+						<path>familyName</path>
+					</source>
+				</outbound>
+				<inbound>
+					<target>
+						<path>familyName</path>
+					</target>
+				</inbound>
+			</attribute>
+			<attribute>
+				<ref>ri:givenName</ref>
+				<displayName>Given Name</displayName>
+				<outbound>
+					<source>
+						<path>givenName</path>
+					</source>
+				</outbound>
+				<inbound>
+					<target>
+						<path>givenName</path>
+					</target>
+				</inbound>
+			</attribute>
+			<attribute>
+				<ref>ri:uid</ref>
+				<displayName>Login Name</displayName>
+				<outbound>
+					<strength>weak</strength>
+					<source>
+						<path>name</path>
+					</source>
+					<expression>
+						<script>
+							<code>name + iterationToken</code>
+						</script>
+					</expression>
+				</outbound>
+				<inbound>
+					<target>
+						<path>name</path>
+					</target>
+				</inbound>
+			</attribute>
+			<attribute>
+				<ref>ri:description</ref>
+				<outbound>
+					<strength>weak</strength>
+					<expression>
+						<value>Created by midPoint</value>
+					</expression>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:mail</ref>
+				<displayName>Mail</displayName>
+				<tolerant>false</tolerant>
+				<outbound>
+					<strength>strong</strength>
+					<source>
+						<path>emailAddress</path>
+					</source>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:l</ref>
+				<displayName>Location</displayName>
+				<outbound>
+					<source>
+						<path>locality</path>
+					</source>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:employeeType</ref>
+				<displayName>Employee Type</displayName>
+				<tolerant>false</tolerant>
+				<outbound>
+					<strength>strong</strength>
+					<source>
+						<path>employeeType</path>
+					</source>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:employeeNumber</ref>
+				<displayName>Employee Number</displayName>
+				<tolerant>false</tolerant>
+				<outbound>
+					<strength>strong</strength>
+					<source>
+						<path>employeeNumber</path>
+					</source>
+				</outbound>
+			</attribute>
+
+			<association>
+				<ref>ri:ldapGroup</ref>
+				<displayName>LDAP Group Membership</displayName>
+				<kind>entitlement</kind>
+				<intent>ldapGroup</intent>
+				<direction>objectToSubject</direction>
+				<associationAttribute>ri:member</associationAttribute>
+				<valueAttribute>ri:dn</valueAttribute>
+			</association>
+
+			<association>
+				<ref>ri:posixGroup</ref>
+				<displayName>POSIX Group Membership</displayName>
+				<kind>entitlement</kind>
+				<intent>posixGroup</intent>
+				<direction>objectToSubject</direction>
+				<associationAttribute>ri:memberUid</associationAttribute>
+				<valueAttribute>ri:uid</valueAttribute>
+			</association>
+
+			<iteration>
+				<maxIterations>5</maxIterations>
+			</iteration>
+
+			<protected>
+				<filter>
+					<q:equal>
+						<q:matching>http://prism.evolveum.com/xml/ns/public/matching-rule-3#stringIgnoreCase</q:matching>
+						<q:path>attributes/ri:dn</q:path>
+						<q:value>cn=idm,ou=Administrators,dc=example,dc=com</q:value>
+					</q:equal>
+				</filter>
+			</protected>
+
+			<activation>
+				<administrativeStatus>
+					<outbound />
+					<inbound>
+						<strength>weak</strength>
+						<expression>
+							<asIs />
+						</expression>
+					</inbound>
+				</administrativeStatus>
+				<lockoutStatus>
+					<outbound/>
+				</lockoutStatus>
+			</activation>
+
+			<credentials>
+				<password>
+					<outbound>
+						<expression>
+							<asIs />
+						</expression>
+					</outbound>
+					<inbound>
+						<strength>weak</strength>
+						<expression>
+							<generate />
+						</expression>
+					</inbound>
+				</password>
+			</credentials>
+
+		</objectType>
+
+		<objectType>
+			<kind>entitlement</kind>
+			<intent>ldapGroup</intent>
+			<displayName>LDAP Group</displayName>
+			<objectClass>ri:groupOfNames</objectClass>
+			<baseContext>
+				<objectClass>ri:organizationalUnit</objectClass>
+				<filter>
+					<q:equal>
+						<q:path>attributes/dn</q:path>
+						<q:value>ou=groups,dc=example,dc=com</q:value>
+					</q:equal>
+				</filter>
+			</baseContext>
+
+			<attribute>
+				<ref>ri:dn</ref>
+				<outbound>
+					<source>
+						<path>name</path>
+					</source>
+					<expression>
+						<script>
+							<code>
+								basic.composeDnWithSuffix('cn', name, 'ou=groups,dc=example,dc=com');
+							</code>
+						</script>
+					</expression>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:member</ref>
+				<fetchStrategy>minimal</fetchStrategy>
+				<outbound>
+					<strength>weak</strength>
+					<expression>
+						<value>cn=fake,dc=example,dc=com</value>
+					</expression>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:cn</ref>
+				<outbound>
+					<strength>weak</strength>
+					<source>
+						<path>name</path>
+					</source>
+				</outbound>
+			</attribute>
+			<configuredCapabilities>
+				<cap:pagedSearch>
+					<cap:defaultSortField>ri:cn</cap:defaultSortField>
+				</cap:pagedSearch>
+			</configuredCapabilities>
+		</objectType>
+
+		<objectType>
+			<kind>entitlement</kind>
+			<intent>posixGroup</intent>
+			<displayName>POSIX Group</displayName>
+			<objectClass>ri:posixGroup</objectClass>
+			<baseContext>
+				<objectClass>ri:organizationalUnit</objectClass>
+				<filter>
+					<q:equal>
+						<q:path>attributes/dn</q:path>
+						<q:value>ou=posixgroups,dc=example,dc=com</q:value>
+					</q:equal>
+				</filter>
+			</baseContext>
+
+			<attribute>
+				<ref>ri:dn</ref>
+				<outbound>
+					<source>
+						<path>name</path>
+					</source>
+					<expression>
+						<script>
+							<code>
+								basic.composeDnWithSuffix('cn', name, 'ou=posixgroups,dc=example,dc=com');
+							</code>
+						</script>
+					</expression>
+				</outbound>
+			</attribute>
+			<attribute>
+				<ref>ri:cn</ref>
+				<outbound>
+					<strength>weak</strength>
+					<source>
+						<path>name</path>
+					</source>
+				</outbound>
+			</attribute>
+			<configuredCapabilities>
+				<cap:pagedSearch>
+					<cap:defaultSortField>ri:cn</cap:defaultSortField>
+				</cap:pagedSearch>
+			</configuredCapabilities>
+		</objectType>
+
+	</schemaHandling>
+
+	<synchronization>
+		<objectSynchronization>
+			<objectClass>ri:inetOrgPerson</objectClass>
+			<kind>account</kind>
+			<intent>default</intent>
+			<focusType>UserType</focusType>
+			<enabled>true</enabled>
+
+			<correlation>
+				<q:equal>
+					<q:path>name</q:path>
+					<expression>
+						<path>$account/attributes/uid</path>
+					</expression>
+				</q:equal>
+			</correlation>
+
+
+			<reaction>
+				<situation>linked</situation>
+				<synchronize>true</synchronize>
+			</reaction>
+			<reaction>
+				<situation>deleted</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink
+					</handlerUri>
+				</action>
+			</reaction>
+			<reaction>
+				<situation>unlinked</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#link
+					</handlerUri>
+				</action>
+			</reaction>
+		</objectSynchronization>
+
+		<objectSynchronization>
+			<objectClass>ri:groupOfNames</objectClass>
+			<kind>entitlement</kind>
+			<intent>ldapGroup</intent>
+			<focusType>OrgType</focusType>
+			<enabled>true</enabled>
+
+			<correlation>
+				<q:equal>
+					<q:path>name</q:path>
+					<expression>
+						<path>$account/attributes/cn</path>
+					</expression>
+				</q:equal>
+			</correlation>
+
+
+			<reaction>
+				<situation>linked</situation>
+				<synchronize>true</synchronize>
+			</reaction>
+			<reaction>
+				<situation>deleted</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink
+					</handlerUri>
+				</action>
+			</reaction>
+			<reaction>
+				<situation>unlinked</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#link
+					</handlerUri>
+				</action>
+			</reaction>
+		</objectSynchronization>
+
+		<objectSynchronization>
+			<objectClass>ri:posixGroup</objectClass>
+			<kind>entitlement</kind>
+			<intent>posixGroup</intent>
+			<focusType>OrgType</focusType>
+			<enabled>true</enabled>
+
+			<correlation>
+				<q:equal>
+					<q:path>name</q:path>
+					<expression>
+						<path>$account/attributes/cn</path>
+					</expression>
+				</q:equal>
+			</correlation>
+
+
+			<reaction>
+				<situation>linked</situation>
+				<synchronize>true</synchronize>
+			</reaction>
+			<reaction>
+				<situation>deleted</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink
+					</handlerUri>
+				</action>
+			</reaction>
+			<reaction>
+				<situation>unlinked</situation>
+				<synchronize>true</synchronize>
+				<action>
+					<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#link
+					</handlerUri>
+				</action>
+			</reaction>
+		</objectSynchronization>
+
+
+	</synchronization>
+
+</resource>
diff --git a/samples/book/2/resource-portal.xml b/samples/book/2/resource-portal.xml
new file mode 100644
index 00000000000..99c8616e61d
--- /dev/null
+++ b/samples/book/2/resource-portal.xml
@@ -0,0 +1,126 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright (c) 2016 Evolveum
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<resource oid="23118a3a-7c0c-11e6-8635-cf5d040d4698"
+    xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" 
+	xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" 
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+    xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
+	xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"
+	xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
+	xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3"
+	xmlns:my="http://myself.me/schemas/whatever">
+
+   	<name>Portal</name>
+    
+	<connectorRef type="ConnectorType">
+		<filter>
+	        <q:equal>
+			<q:path>c:connectorType</q:path>
+	          <q:value>org.identityconnectors.databasetable.DatabaseTableConnector</q:value>
+	        </q:equal>
+	      </filter>
+	</connectorRef>
+
+	<connectorConfiguration>
+
+		<icfc:configurationProperties
+		xmlns:icscdbtable="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-databasetable/org.identityconnectors.databasetable.DatabaseTableConnector">
+			<icscdbtable:port>5432</icscdbtable:port>
+			<icscdbtable:host>localhost</icscdbtable:host>
+			<icscdbtable:user>crm</icscdbtable:user>
+			<icscdbtable:password><clearValue>qwe123</clearValue></icscdbtable:password>
+			<icscdbtable:database>crm</icscdbtable:database>
+			<icscdbtable:table>portalusers</icscdbtable:table>
+			<icscdbtable:keyColumn>login</icscdbtable:keyColumn>
+			<icscdbtable:jdbcDriver>org.postgresql.Driver</icscdbtable:jdbcDriver>
+			<icscdbtable:jdbcUrlTemplate>jdbc:postgresql://%h:%p/%d</icscdbtable:jdbcUrlTemplate>
+			<icscdbtable:enableEmptyString>false</icscdbtable:enableEmptyString>
+			<icscdbtable:rethrowAllSQLExceptions>true</icscdbtable:rethrowAllSQLExceptions>
+			<icscdbtable:nativeTimestamps>false</icscdbtable:nativeTimestamps>
+			<icscdbtable:allNative>false</icscdbtable:allNative>
+		</icfc:configurationProperties>
+	
+	</connectorConfiguration>
+
+	<schemaHandling>
+
+		<objectType>
+			<displayName>Default Account</displayName>
+			<default>true</default>
+			<objectClass>ri:AccountObjectClass</objectClass>
+			<attribute>
+				<ref>icfs:uid</ref>
+				<displayName>User ID</displayName>
+				<limitations>
+					<access>
+						<read>true</read>
+					</access>
+				</limitations>
+			</attribute>
+			<attribute>
+				<ref>icfs:name</ref>
+				<displayName>Name</displayName>
+				<limitations>
+					<minOccurs>0</minOccurs>
+					<access>
+                           <read>true</read>
+						<add>true</add>
+						<modify>true</modify>
+					</access>
+				</limitations>
+				<outbound>
+					<source>
+						<path>$user/name</path>
+					</source>
+				</outbound>
+			</attribute>
+
+			<attribute>
+				<ref>ri:fullname</ref>
+				<displayName>Full name</displayName>
+				<outbound>
+					<source>
+						<path>$user/fullName</path>
+					</source>
+				</outbound>
+			</attribute>
+			
+			<activation>
+				<administrativeStatus>
+					<outbound/>
+				</administrativeStatus>
+			</activation>
+			
+		</objectType>
+	</schemaHandling>
+
+	<capabilities xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
+		<configured>
+			<cap:activation>
+				<cap:status>
+					<cap:attribute>ri:disabled</cap:attribute>
+					<cap:enableValue></cap:enableValue>
+					<cap:enableValue>false</cap:enableValue>
+					<cap:disableValue>true</cap:disableValue>
+				</cap:status>
+			</cap:activation>
+		</configured>
+	</capabilities>
+
+</resource>