Skip to Content.
Sympa Menu

grouper-users - LDAPPC: Alternative to incremental export?

Subject: Grouper Users - Open Discussion List

List archive

LDAPPC: Alternative to incremental export?

Chronological Thread 
  • From: "Dr. Loris Bennett" <>
  • To: Grouper Users Mailing List <>
  • Subject: LDAPPC: Alternative to incremental export?
  • Date: Mon, 08 Dec 2008 14:37:25 +0100
  • Organization: Freie Universität Berlin


We would like to use grouper to supply Active Directory with certain
primary groups, such as 'students', 'staff', etc. The AD admins then
want to use these groups to define other groups within AD. Obviously it
would be preferable from the Grouper perspective, if we could provision
'final' groups to AD, but currently that is not the situation we have.

The current version of LDAPPC does not perform an incremental export,
but rather deletes the existing groups and rewrites the group
information. Within our constellation with AD, this seems to be a
blocking point, since compound groups defined in AD would loose the
information about their constituent groups.

At the moment the only solution seems to me to implement some form of
incremental export ourselves, but I would be interested in hearing
whether anyone has an alternative suggestion.



Dr. Loris Bennett (Mr.)
Freie Universität Berlin
ZEDAT - Zentraleinrichtung für Datenverarbeitung / Computer Center
Compute & Media Service
Fabeckstr. 32, Room 221
D-14195 Berlin
Tel ++49 30 838 51024
Fax ++49 30 838 56721


Archive powered by MHonArc 2.6.16.

Top of Page