Skip to Content.
Sympa Menu

grouper-dev - incremental provisioning theory

Subject: Grouper Developers Forum

List archive

incremental provisioning theory

Chronological Thread 
  • From: Tom Zeller <>
  • To: Grouper Dev <>
  • Subject: incremental provisioning theory
  • Date: Fri, 5 Feb 2010 16:54:11 -0600
  • Domainkey-signature: a=rsa-sha1; c=nofws;; s=gamma; h=mime-version:sender:from:date:x-google-sender-auth:message-id :subject:to:content-type; b=Fy0nhlidjqlwvmJs7jIDDeBzW8X5JEClDRGNTKMEz7/uu/SxQcPbekpEv6+5KCga89 4ZKNx8tCIiVD3lmMUqREKAfS97m9KvhamYJMvCThSDVVUkyuSQNW/4AIAfDrRwLrxd38 flvGyWQMXyYUxRKjU3HLq5UBF3FJTfXK1MANY=

I'm not sure how to provision a subset of a provisioned attribute's values.

We've been calling this incremental provisioning, likely based on the
changelog. For example, "add member M to group G field F".

Ldappc-ng gets the attributes to provision from the shib attribute
resolver, which is able to calculate a single attribute (and all of
its values), but not necessarily an attribute and only one of its

This is a likely a performance problem for provisioned attributes with
a large number of values, for example, a group with many members.

I think it's possible to modify the "data context" passed to the shib
attribute resolver and its behavior to support this kind of
provisioning, however I have not attempted to.

There's more I can say, but I think I should stop here for comments.


Archive powered by MHonArc 2.6.16.

Top of Page