Grouper Developers Forum

[Tom Zeller <>]

I'm polling for feedback regarding desired ldappc/provisioning features.

Is there something you wish ldappc could do ?

The following is my wish list :

- provision Active Directory (and limitedly, Exchange)

- real-time/partial provisioning

- pluggable attributes (regex, script, etc.)

- SPML, non-ldap targets

- dry-run

- monitoring

By 'pluggable attributes' I mean the ability to provision group attributes more flexibly than the current one-to-one grouper attribute to ldap attribute mapping, and would allow for regex's, scripting, etc. I consider this to be a requirement for provisioning Active Directory, e.g. an Exchange group's proxyAddresses attribute.

Real-time provisioning will likely attach to Grouper's upcoming notification support. By 'partial' provisioning I mean the ability to provision part of a group, e.g. the addition or deletion of a single member without having to compute the entire group, since this is potentially expensive for large groups.

I'm interested in ldappc speaking SPML. This would allow provisioning of non-ldap targets (e.g. JDBC), and provide the ability to plug into other identity management or provisioning systems that also speak SPML (or anything that a site writes an SPML connector for).

By 'dry-run' I mean the ability to display synchronization operations before actually performing them, which is helpful when testing new configurations and troubleshooting.

And finally, it would be nice if ldappc could integrate with standard monitoring systems.

Your feedback is appreciated,

TomZ