Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] ldap subject can't create root stem

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] ldap subject can't create root stem


Chronological Thread 
  • From: Tom Zeller <>
  • To: Tom Barton <>
  • Cc:
  • Subject: Re: [grouper-users] ldap subject can't create root stem
  • Date: Fri, 14 Oct 2005 13:18:37 -0500

Thanks, Tom.

I assumed there could only be one person subject source.

I can create stems, groups, and add (LDAP) members; I haven't tried the GUI.

Tom



Tom Zeller wrote:

Greetings,
I'm experimenting with an LDAP adapter for person subjects. When I
try to create a stem via
GrouperStem ns = GrouperStem.create(s, Grouper.NS_ROOT, "uMemphis");
I get a runtime exception "This subject cannot create at root-level".
I've modified grouper.properties so that member.system is no longer GrouperSystem, but rather my LDAP person object.


As a sanity check, can your LDAP subject create that namespace using the GUI?


Do I need to add GrouperSystem to LDAP and leave member.system = GrouperSystem ? Do I need to modify my person adapter so that GrouperSystem doesn't have to exist in LDAP ?


Blair can comment on the extent to which GrouperSystem remains "special" within the 0.6 release of the API. One workaround for now is to configure two 'person' subject sources - the JDBCSourceAdapter pointed at the Group Registry, and your LDAP one. Keep GrouperSystem in the former, just as it ships in the distribution.

In the 0.6 release it is necessary for all subjects, including GrouperSystem, to have 'description' and 'loginid' subject attributes in order the the GUI work properly. Any others are gravy, used to enhance searching. This is likely to change somewhat over the next 6-8 weeks or so.


How do I tell Grouper that my LDAP person object has the appropriate privilege ?


We're contemplating using a special group akin to the "wheel" group from BSD unix which would list the subjects that can act with the privilege of GropuerSystem. That is slated to make it into the 0.9 release.

Tom





Archive powered by MHonArc 2.6.16.

Top of Page