Grouper Developers Forum

["William G. Thompson, Jr." <>]

+1 on provisioning strategies.

Lafayette is just starting the down the path with Grouper.  One of the
goals is to have a default set of services/accounts authorized/created
for a variety of constituents based on reference groups and manual
exceptions.

Our current conception of this is to create a composite
authZ/provisioning group per service (like the UC VPN example). I
would love to hear more from others who are already down this path.
Are there other ways to configure/organize a default set of services?
Does this approach scale?

Another is managing a set of LDAP group memberships that drive authZ
to samba shares.  This appears to be a straight forward Grouper use
case?

Also wondering if there is enough Grouper experience now to describe
other general configuration/deployment approaches to various Grouper
capabilities.  Something of a how-to for various Grouper use cases as
well as a summary of operational experience.  (e.g. If you have this
kind of authZ use case, config Grouper like this...  If you run
Grouper expect to have this kind of care and feeding...  If you run
into this kind of issue, try this, look here...)

Best,
Bill



On Mon, Aug 25, 2014 at 1:15 PM, Michael R. Gettes 
<>
 wrote:
> big surprise on this suggestion coming from me….
>
> provisioning strategies.  i can talk about AMQ and the CMU experience.  i
> already posted slides here but i can discuss them if folks wish.
>
> /mrg
>
> On Aug 24, 2014, at 4:06 PM, Tom Barton 
> <>
>  wrote:
>
> Colleagues,
>
> There will be a Grouper Working Group meeting at the Internet2 Tech-X
> conference Wed Oct 29, 12:15pm-1:15pm. Please reply to this thread to
>
> suggest topics you'd like to be included in the agenda
> volunteer to do a lighting-style presentation of your organization's
> group-related practices, field experiences, or allied tools
> or anything else you think would be a valuable use of our time together
>
>
> Thanks,
> Tom
>
>