Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] LDAPPC for eduCourse provisioning

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] LDAPPC for eduCourse provisioning

Chronological Thread 
  • From: Tom Zeller <>
  • To: Tim Darby <>
  • Cc:
  • Subject: Re: [grouper-users] LDAPPC for eduCourse provisioning
  • Date: Fri, 12 Jun 2009 14:09:20 -0500
  • Domainkey-signature: a=rsa-sha1; c=nofws;; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=DG2JBOqx/gNHEat3vJpY/NBImasu1bMEj1PPFZtWaknwibzlCvXHQe3CPqkPBmMImr 6CgWcWpZ5+B0I7eXt/uvj5IsBY0un8W4PgWYp48EQkP45id/fOLcILyDnjHlzCrLor1N Uo0GTnbfLdNGYIb60zSbP2XiiIokP4EvxLDh4=

No, it looks like eduCourseMember is difficult to provision easily.

I think it's possible - in theory.

For every value of eduCourseMember, you would need to run ldappc with a configuration like :

  <member-groups-list list-object-class="eduMember"
      list-attribute="eduCourseMember" naming-attribute="Learner" />

And, of course, you would need to configure the Learner attribute (and Instructor, etc.) to be the role@eduCourseOffering value. And, I assume that you have a group for each role.

Obviously this is not a desirable situation.

In the short term, it might be possible to allow the following :

 <member-groups-list list-object-class="eduMember"
      list-attribute="isMemberOf" naming-attribute="name" />
  <member-groups-list list-object-class="eduMember"
      list-attribute="eduCourseMember" naming-attribute="Learner" />

so that one could provision in one ldappc run.

If you use custom lists, one for each role on a single group representing an eduCourse, then we would need to allow :

<member-groups-list list-object-class="eduMember"
      list-attribute="eduCourseMember" naming-attribute="Learner" naming-list="custom_list" />

For 1.5+, we're going to attempt to use Shibboleth's AttributeResolver to calculate attributes for provisioning. Either the Template or Scoped AttributeDefinition would probably work for eduCourseMember.

This is a good use case that we should support.


On Fri, Jun 12, 2009 at 1:24 PM, Tim Darby <> wrote:
Is there a way to configure LDAPPC to provision the eduCourseMember
attribute? I don't see a way to provision a value format of


Archive powered by MHonArc 2.6.16.

Top of Page