Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Provisioning multiple objects with ldappc-ng?

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Provisioning multiple objects with ldappc-ng?


Chronological Thread 
  • From: Tom Zeller <>
  • To: Paul Engle <>
  • Cc:
  • Subject: Re: [grouper-users] Provisioning multiple objects with ldappc-ng?
  • Date: Wed, 14 Jul 2010 11:21:32 -0500
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=apidNqpvM+jVMticJ6I4aX478dHCZJqmSZgxwkmNKVPA6dsGD9ZUXWyTHqtaLTOJqK aA7n5mAVAp0X9BiWlaE0BfLTaIrKSDFmedexyZbRLiMSA6wq7s/J+UTb0XhznoBss5y0 jQvmQ1sM3gD/uPCM9avphI1M0DgHY82f9b5Lw=

What's missing is good documentation, I've created a bug to ensure I
follow through :

https://bugs.internet2.edu/jira/browse/GRP-467

This is similar to a previous thread :

https://lists.internet2.edu/sympa/arc/grouper-users/2010-06/msg00062.html

I'm working on the wiki, however, for right now :

The -calc <id>, -diff <id>, and -sync <id> options operate only on the
one object with the given <id>, for example, a group where the id is
the group name.

The -bulkCalc, -bulkDiff, and -bulkSync options operate on the
identifiers of all objects returned from the Grouper DataConnectors in
the Attribute Resolver configuration. All objects are provisioned by
default. An optional <GroupFilter> filters the objects to be
provisioned.

See "Group Filters" on
https://spaces.internet2.edu/display/GrouperWG/Grouper+and+Shibboleth+Integration.

For example, to provision groups (and their members) in a specific stem :

<resolver:DataConnector id="GroupDataConnector"
xsi:type="grouper:GroupDataConnector">
<grouper:GroupFilter xsi:type="grouper:StemName" name="stem:name"
scope="SUB" />
</resolver:DataConnector>

<resolver:DataConnector id="MemberDataConnector"
xsi:type="grouper:MemberDataConnector">
<grouper:GroupFilter xsi:type="grouper:StemName" name="stem:name"
scope="SUB" />
</resolver:DataConnector>

There are more examples in the junit test cases of the grouper-shib project :

http://anonsvn.internet2.edu/cgi-bin/viewvc.cgi/i2mi/tags/GROUPER_1_6_0/ldappcng/grouper-shib/src/test/resources/test/edu/internet2/middleware/grouper/shibboleth/dataConnector/

http://anonsvn.internet2.edu/cgi-bin/viewvc.cgi/i2mi/tags/GROUPER_1_6_0/ldappcng/grouper-shib/src/test/resources/test/edu/internet2/middleware/grouper/shibboleth/dataConnector/GroupDataConnectorTest-resolver.xml?revision=6828&view=co

Hopefully this will be enough for now to keep you rolling. Of course,
let us know what else you need.

TomZ

On Wed, Jul 14, 2010 at 9:46 AM, Paul Engle
<>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> All,
>
> I'm slowly wrapping my head around the new ldappc-ng
> provisioning utility, and it looks great. But I don't
> immediately see a way to provision just a subtree of the
> grouper hierarchy as I did with ldappc with the
> <grouper-queries/> section. Am I missing something? When I do a
> - -calc <stemName>, the output doesn't have anything but that
> individual stem. Is there a way to make it recurse from a given
> point?
>
> In our current environment, I use several different instances
> of ldappc to provision separate sections of the grouper
> hierarchy in different manners (different objectclasses,
> attributes, etc.) It looks like the new provisioner will be
> able to handle this all in one configuration (yay!) But I'd
> like to be able to test the separate sections individually
> while I'm still learning without having to provision the entire
> database.
>
>  -paul
>
> - --
> Paul D. Engle              |  Rice University
> Sr. Systems Administrator  |  Information Technology - MS119
> (713)348-4702              |  PO Box 1892
>
>            |  Houston, TX 77252-1892
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.12 (MingW32)
>
> iEYEARECAAYFAkw9zcoACgkQCpkISWtyHNuuDACfWANUuH7vPQhBOfYISSuyf+Ql
> dbYAnR76FJAUAVJE+noyukXmClo6/ftj
> =jM4H
> -----END PGP SIGNATURE-----



Archive powered by MHonArc 2.6.16.

Top of Page