Skip to Content.
Sympa Menu

grouper-dev - RE: [grouper-dev] fyi : provisioning wish list

Subject: Grouper Developers Forum

List archive

RE: [grouper-dev] fyi : provisioning wish list


Chronological Thread 
  • From: Gagné Sébastien <>
  • To: "Chris Hyzer" <>, "Tom Zeller" <>, "Grouper Dev" <>
  • Subject: RE: [grouper-dev] fyi : provisioning wish list
  • Date: Fri, 9 Mar 2012 13:00:56 -0500

Ok, I get where you're going.

If I'm using the PSP for provisioning Grouper groups to AD, would it be
possible to have a second PSP for the reconciliation of AD groups in Grouper
? From what I understand, there would be conflicts in the configuration.
Maybe they could both run if they were on two separate machines.


-----Message d'origine-----
De : Chris Hyzer
[mailto:]

Envoyé : 9 mars 2012 11:36
À : Gagné Sébastien; Tom Zeller; Grouper Dev
Objet : RE: [grouper-dev] fyi : provisioning wish list

An original intent (and an item on the list of TODO's) was for the loader to
have distributed management. So the idea would be that someone (not a
central admin) could have access to configure loader jobs (via grouper
attributes) from a certain data source with certain credentials. At this
point I think only grouper admins should be configuring loader jobs, and only
one institution has asked for this capability though hasn't really pressed
the issue. Another goal was for loader jobs to be viewable/configurable via
the UI, which you can do, though unfortunately if you make a new job (instead
of edit an existing job), you need to bounce the loader process. We could
fix this at some point if we want. I think both will be supported, and the
PSP will probably (hopefully?) have more market share in the future...

Thanks,
Chris

-----Original Message-----
From:


[mailto:]
On Behalf Of Gagné Sébastien
Sent: Friday, March 09, 2012 9:37 AM
To: Tom Zeller; Grouper Dev
Subject: RE: [grouper-dev] fyi : provisioning wish list

We're looking into LDAP to Grouper synchronisation. As I see it there's two
way of doing it (loader and psp); which one will be the future for Grouper ?
Which one would you suggest ? Will both ways be supported or will one of them
phase out ?

I haven't seen how the PSP LDAP-to-Grouper works but does it do
incremental/changelog provisioning also ? Or is it a cron based full sync
(like the loader) ? I believe Active Directory has a changelog, could it
eventually be used to import changes in Grouper ?

Thanks

-----Message d'origine-----
De :


[mailto:]
De la part de Tom Zeller Envoyé : 8 mars 2012 18:11 À : Grouper Dev Objet :
[grouper-dev] fyi : provisioning wish list

Just a note that I have two provisioning "wish list" items on my list :

Multiple ldap targets
https://bugs.internet2.edu/jira/browse/GRP-640

and

Synchronize from ldap to grouper
https://bugs.internet2.edu/jira/browse/GRP-751

These jira issues lack comments or explanation, if anyone feels like
providing more information, please do so.

Thanks,
TomZ



Archive powered by MHonArc 2.6.16.

Top of Page