Subject: Grouper Users - Open Discussion List
Re: [grouper-dev] Re: [grouper-users] Dynamics groups in grouper
- From: Kathryn Huxtable <>
- To: "GW Brown, Information Systems and Computing" <>
- Cc: , ,
- Subject: Re: [grouper-dev] Re: [grouper-users] Dynamics groups in grouper
- Date: Wed, 20 Feb 2008 08:18:32 -0600
At KU, we chose to use the "loader" approach. Since our data from our EIS systems comes in a nightly load, we run the grouper loader after integrating that data into our IdMS repository. I left KU before the loader was fully configurable, but it was in use. It was just a pain to configure.
It worked well for us, and KU is currently working on improving the loader, or so I am informed.
On Feb 20, 2008, at 5:12 AM, GW Brown, Information Systems and Computing wrote:
One of the major features of Grouper is that all group memberships are `flattened` in the database so that complex nesting and group math do not need to be calculated at run time. A `dynamic` group would pose problems in Grouper because you could not work out the indirect memberships if you tried to make it a member of another group.
What you could have is a loader which examines all subjects and applies a set of rules to assign them to static groups. How often you need to run the loader would depend on how often attributes change. Ideally the loader would be able to query for subjects which had actually changed since the last run.
Another approach would be for Grouper to have a `dynamic` type, which would prevent that Group from being used for membership calculations - or as a subject for privilege assignment, but which could be provisioned to LDAP where it could be represented as a dynamic group. However, this would likely be a big change to the API and make it more difficult for client code.
I have CC`ed this response to the dev list so we can carry on the discussion there.
--On 20 February 2008 11:54 +0100 Arnaud Deman <> wrote:
Thanks for your quick answer.
This mix was our first idea but now we as the uPortal applications
(Moodle for instance) access the groups via LDAP we would like to have
also the PAGS groups in our LDAP. The second point is that we are
thinking about using Grouper as the group manager of the whole
information system and not only for uPortal. The fact that we can't list
the members of PAGS groups can also be a problem.
I think I will try to write an extension of Grouper to handle this kind
of groups. I don't know if someone else could be Interested by this.
I may switch the the grouper devel list to ask the question.
Have a good day,
GW Brown, Information Systems and Computing a écrit :
Grouper does not support dynamic groups. You can, however, mix and
match group stores in uPortal so you should be able to use a
combination of PAGS (Person Attribute Group Store) for dynamic groups
and Grouper for static groups.
GW Brown, Information Systems and Computing
- Dynamics groups in grouper, Arnaud Deman, 02/20/2008
- Re: [grouper-users] Dynamics groups in grouper, GW Brown, Information Systems and Computing, 02/20/2008
Archive powered by MHonArc 2.6.16.