grouper-study

[Gail H Lift <>]

Michigan also has an LDAP primary subject source, with affiliation-related person data changing throughout the day. We have the same concerns about prioritization and queueing of jobs. We are concerned about load, and whether jobs would be re-triggered multiple times while still running. This could also result in provisioning delays.

Our IAM system is event-driven. We could easily send changed subject data to grouper in real time.

This page:

https://spaces.internet2.edu/display/Grouper/Grouper+loader+real+time+updates

says 

"Support for LDAP jobs is minimal right now.  If a message is added to the message queue for an LDAP job, a full sync is simply performed.  If you plan to use this feature and would like to see this improved, please contact the Grouper Team."

Perhaps we should make a joint request?

On Thu, Nov 16, 2017 at 10:34 AM, Coleman, Erik C <> wrote:

Bert was promoting the real-time loader in the last conference call, so I’m starting to play around with it. I see already that it is primarily designed for SQL loader jobs not LDAP jobs, but our primary subject source is LDAP-based.  What sort of options do I have for improving our automatic LDAP-based loader processes? We have hundreds of groups, several with up to 100K+ members, and we have a concern with the prioritization and queueing of jobs if we end up stacking a lot of these, or we have other departments on campus creating loader jobs for their groups.  We also sync these large groups to a downstream Active Directory OU as well.

 

Thanks for any tips!

 

Erik Coleman

University of Illinois at Urbana-Champaign

 

 

 

 

--

Gail H Lift
MCommunity, IAM-IIA, ITS, University of Michigan