Grouper Developers Forum

["caleb racey" <>]

At Newcastle the Active directory is our username/password store and
only institutional directory, most of our identity information however
reside in databases and SAP. 

I'm afraid my hint on how grouper will play with the active directory is
for us it won't. Our opinion of the active directory is that it is best
left to it's main task of being a computer management system and a
username password store.  The irrevocable nature of schema changes make
it unsuitable for use as a person directory. Also  it's integration into
many Microsoft applications means that seemingly innocent updates may
well have knock on effects for these apps. 

There may be the possibility of using "light weight directory services"
(which used to be called ADAM: active directory in application mode) to
create effectively a "view" onto your active directory which you can
then integrate  data into without the risk of breaking your main active
directory. We have no experience of this but it was raised as a
possibility.  

Cheers

Cal


 
 

>-----Original Message-----
>From: Joy Veronneau 
>[mailto:]
>Sent: 20 February 2008 16:37
>To: Grouper Dev; Grouper Users
>Subject: [grouper-dev] Grouper and Active Directory?
>
>Hi All,
>
>Here at Cornell we are planning on deploying Grouper soon, with
>provisioning of groups to our SunOne white pages directory.  Also in
>the works is a campus deployment of Active Directory, which will be
>partially provisioned from our SunOne directory. I am very unfamiliar
>with Active Directory, so I am wondering if there are any campuses out
>there who have a similar setup and might be able to offer some hints
>about how Grouper will play with Active Directory.  As you can see,
>I'm not really even sure what questions to ask here. What do we need
>to investigate?
>
>Thanks-
>
>Joy