Grouper Developers Forum

[Tim Darby <>]

If we Grouper users have any vote on the PSP replacement (and please let it be soon), I vote for a Kafka based solution (http://kafka.apache.org) on purely selfish reasons - that's where our Identity Management team is going. :)

Tim Darby

UA Information Security, Identity Services | The University of Arizona |  | +1 520.626.3799

On Thu, Jun 18, 2015 at 9:55 AM, Emily Eisbruch <> wrote:

Notes: Grouper Call of  Wed. 17-June-2015

Attending:

Chris Hyzer, U. Penn

Jim Fox, U. Washington  

Misagh Moayyed, Unicon

Shilen Patel, Duke

David Langenberg, U. Chicago

Emily Eisbruch, Internet2  

New Action Items

[AI] (Chris) look at using Eclipse for corrupt jars issue

 Carry Over Action Items

[AI] (Shilen) work on supporting virtual attributes for the subject name and description using _expression_ language

[AI] (Chris)  run the unit tests with patches and send commands to John G

 

[AI] (Chris) look at silent mode for patching

[AI] (Chris) record our policy about copyright dates on Grouper wiki (only new files have current date). 

[AI] (Tom) invite Chris Phillips to an upcoming Grouper-Dev call

 

Team wants to have option to send SCIM messages and want to talk with Chris about SCIM format options, prospects. Align on where standard is and is going and what Grouper will do with it.

[AI] (DaveL) follow up on provisioning empty groups to LDAP to be sure the solution is documented

[AI] (Tom) to bring pen testing need into TIER process (remains long term)

Discussion 

Virtual attributes for subject name and description

https://bugs.internet2.edu/jira/browse/GRP-1140

 

• Shilen started implementing the change

• the attribute used for the name and description gets passed in

• can get resolved later using _expression_ language

• multiple files (about 20) are impacted by this work

• impacted Subject API and subject decorator;

• the constructor changed, so not a backward compatible change

• should this still be handled via a patch?

• Decision: yes, OK to be a patch

• Shilen still needs to do some testing

 TIER Core Technology Team

• Chris had phone call w Steve Zoppi about TIER.

• The TIER planning team has collected use cases from the community.

• Plan to determine a common toolset framework for the software projects being used in TIER

• common tools for build process, installing, continuous integration

• will try to harmonize the projects in that area (Shib, COmanage, Grouper and possibly other projects)

• regarding MAVEN - Grouper team should wait and see what the TIER direction is

• Grouper will benefit by being consistent with other TIER projects

• Chris will provide more info once TIER working groups start meeting

• Comment : could be overreach if TIER dictates all the tools for a project

• There may not be one golden hammer for all

• Apereo does dictate some approaches, but does not dictate tools

•     Chris: products within TIER should look similar to implementers

• hope for some quick wins and some consistency, sharing between projects

Recruitment for new provisioning person on Grouper Team (see job ad)

•      TomB is working on this

IAM Online feedback (June 10 IAM Online focused on Grouper case studies)

• Good discussion on the Adobe Connect chat during IAM Online

• Thanks to GEANT, UCLA and Oregon State University for sharing their case studies

CIFER update

• Jim Fox and Chris working with Keith Hazelton on this

• working on standard group APIs

• CIFER made a lot of progress a year ago

• there is a new push to get something designed by this fall if possible, to help the TIER effort

• some work using SCIM

Issue Roundup

 

• Shilen webprod3 access

  • working OK now

• Hooks and copy group patch

  • Done

  • https://lists.internet2.edu/sympa/arc/grouper-dev/2015-06/msg00012.html

• Filter loader jobs in daily report

• Audit to import and export pull request

  • Chris will work on this

• PSP AD samAccountname

  • Dave working on this

• Selective PSP provisioning

  • include/exclude

  • using a hook, a rule, adding a legacy attribute

  • Shilen will put this into a patch

  • will change the PSP resolver

• LDAP loader display name

  • https://bugs.internet2.edu/jira/browse/GRP-1091   

  • Chris working on this

• PSP Java 8 issue

  • if we move to Java 8, Grouper no longer supports Java 7

  • or we would need to maintain two PSP versions

  • note that long-term plan is to move away from PSP

  • Suggestion to add a message about what Java version is detected

  • https://bugs.internet2.edu/jira/browse/GRP-1141

• Grouper SCIM

  • Misagh found issue with corrupt jars

  • using Eclipse can work

  • Chris will check this out

  • [AI] (Chris) look at using Eclipse for corrupt jars issue

• Timing for the next Grouper minor release?

  • Chris: suggestion to do a Grouper release in Sept 2015, prior to Technology Exchange in Oct 2015

  • this would be a maintenance release to include the patches

  • especially important for Maven users

Next Grouper Call: Wed. July 1, 2015

 

Emily Eisbruch, Work Group Lead, Trust and Identity
Internet2

office: +1-734-352-4996 | mobile +1-734-730-5749