Skip to Content.
Sympa Menu

grouper-dev - Re: [grouper-dev] Re: Ldappc issues

Subject: Grouper Developers Forum

List archive

Re: [grouper-dev] Re: Ldappc issues

Chronological Thread 
  • From: Kathryn Huxtable <>
  • To: "" <>, Jeff Van Eeuwen <>, <>
  • Cc: <>
  • Subject: Re: [grouper-dev] Re: Ldappc issues
  • Date: Tue, 06 Feb 2007 16:22:24 -0600

I have a rather functional version of rdbpc now. I'm attaching a sample
rdbpc.xml configuration file so you can see what it does.

I need to write a test suite and then I can release this back to Internet2.

I used Maven2 as a build tool, which I know is not the I2 way, but it's what
I use.

If anyone is interested in this in advance of my writing a test suite, let
me know.


On 1/31/07 4:36 PM, "Kathryn Huxtable"

> Okay, I have a very preliminary version of ldappc, which I have renamed to
> rdbpc. It provisions tables in an RDBMS. I can run through a provisioning
> cycle with nothing to do in about 30 seconds.
> I am no longer interested in provisioning LDAP from Grouper and Signet. I'll
> provision my Oracle tables and then provision LDAP from there using my
> current provisioning software.
> When I have this in such shape that I'm willing to run it in production,
> I'll release it to I2. I have used the edu.internet2.middleware.rdbpc
> package name. I can change this if that's desired.
> -K
> On 1/30/07 9:12 AM, "Kathryn Huxtable"
> <>
> wrote:
>> Yes. The objectClass attribute is indexed by default, and I indexed
>> eduPersonPrincipalName, which is what I'm using for a subject search. My
>> RDN
>> is my person registry key, and it doesn't seem to matter whether I use it
>> or
>> the EPPN as a subject search. Both are indexed.
>> -K
>> On 1/30/07 8:53 AM, "Jeff Van Eeuwen"
>> <>
>> wrote:
>>> Kathryn
>>> Since the time is spent looking for subject DNs, are there indexes defined
>>> for
>>> the attributes used in the filter defined in the source-subject-identifier
>>> section of the configuration file? (I assume there are given that
>>> isMemberOf
>>> is indexed)
>>> Jeff
>>>> Oh, and yes, isMemberOf is indexed in my SunJava 5.2 directory server. -K
>>>> On 1/29/07 2:01 PM, "Tom Barton"
>>>> <>
>>>> wrote:
>>>>> <I'm CCing just the grouper-dev list, to pick just one place for
>>>>> continuing this thread.>
>>>>> Kathryn Huxtable wrote:
>>>>>> Okay, I see that the problem is that it takes over 15 minutes to search
>>>> the
>>>>>> existing subject DNs in my LDAP directory.
>>>>> Do you refer to (1) grouper API's use of the subject API to render
>>>>> membership lists to present to ldappc, or (2) ldappc looking up DNs of
>>>>> subjects in LDAP in order to review and update their memberships?
>>>>> About how many subjects, groups, and memberships are referenced in the
>>>>> groups selected for provisioning?
>>>>> Thanks,
>>>>> Tom

Attachment: rdbpc.xml
Description: Binary data

  • Re: [grouper-dev] Re: Ldappc issues, Kathryn Huxtable, 02/06/2007

Archive powered by MHonArc 2.6.16.

Top of Page