Grouper Users - Open Discussion List

["Dr. Loris Bennett" <>]

Hi,

We would like to use grouper to supply Active Directory with certain
primary groups, such as 'students', 'staff', etc. The AD admins then
want to use these groups to define other groups within AD. Obviously it
would be preferable from the Grouper perspective, if we could provision
'final' groups to AD, but currently that is not the situation we have.

The current version of LDAPPC does not perform an incremental export,
but rather deletes the existing groups and rewrites the group
information. Within our constellation with AD, this seems to be a
blocking point, since compound groups defined in AD would loose the
information about their constituent groups.

At the moment the only solution seems to me to implement some form of
incremental export ourselves, but I would be interested in hearing
whether anyone has an alternative suggestion.

Thanks

Loris

-- 
Dr. Loris Bennett (Mr.)
Freie Universität Berlin
ZEDAT - Zentraleinrichtung für Datenverarbeitung / Computer Center
Compute & Media Service
Fabeckstr. 32, Room 221
D-14195 Berlin
Tel ++49 30 838 51024
Fax ++49 30 838 56721
Email 

Web www.zedat.fu-berlin.de