Skip to Content.
Sympa Menu

grouper-dev - ldappc/provisioning feature requests ?

Subject: Grouper Developers Forum

List archive

ldappc/provisioning feature requests ?

Chronological Thread 
  • From: Tom Zeller <>
  • To: "" <>
  • Subject: ldappc/provisioning feature requests ?
  • Date: Wed, 8 Apr 2009 17:35:25 -0500
  • Domainkey-signature: a=rsa-sha1; c=nofws;; s=gamma; h=mime-version:sender:from:date:x-google-sender-auth:message-id :subject:to:content-type; b=M3IlM8z3fkKwvj0gbytqB3wFj1xfoDjN8CsRzgBorT07622Qvelge5tfw7a7ab0jPH OLHzNiTBaxEMRvvuH73p4iNRa0JG1hDEf7fWqGTD7LuigiJy0XCkmys2n9QXTCfm+rOa WyhZI5eV+iGQNw341pF/b26G8RyO8gbAvJPC0=

I'm polling for feedback regarding desired ldappc/provisioning features.

Is there something you wish ldappc could do ?

The following is my wish list :

- provision Active Directory (and limitedly, Exchange)

- real-time/partial provisioning

- pluggable attributes (regex, script, etc.)

- SPML, non-ldap targets

- dry-run

- monitoring

By 'pluggable attributes' I mean the ability to provision group attributes more flexibly than the current one-to-one grouper attribute to ldap attribute mapping, and would allow for regex's, scripting, etc. I consider this to be a requirement for provisioning Active Directory, e.g. an Exchange group's proxyAddresses attribute.

Real-time provisioning will likely attach to Grouper's upcoming notification support. By 'partial' provisioning I mean the ability to provision part of a group, e.g. the addition or deletion of a single member without having to compute the entire group, since this is potentially expensive for large groups.

I'm interested in ldappc speaking SPML. This would allow provisioning of non-ldap targets (e.g. JDBC), and provide the ability to plug into other identity management or provisioning systems that also speak SPML (or anything that a site writes an SPML connector for).

By 'dry-run' I mean the ability to display synchronization operations before actually performing them, which is helpful when testing new configurations and troubleshooting.

And finally, it would be nice if ldappc could integrate with standard monitoring systems.

Your feedback is appreciated,

  • ldappc/provisioning feature requests ?, Tom Zeller, 04/08/2009

Archive powered by MHonArc 2.6.16.

Top of Page