Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Provisioning multiple objects with ldappc-ng?

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Provisioning multiple objects with ldappc-ng?

Chronological Thread 
  • From: Tom Zeller <>
  • To: Paul Engle <>
  • Cc:
  • Subject: Re: [grouper-users] Provisioning multiple objects with ldappc-ng?
  • Date: Wed, 14 Jul 2010 11:21:32 -0500
  • Domainkey-signature: a=rsa-sha1; c=nofws;; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=apidNqpvM+jVMticJ6I4aX478dHCZJqmSZgxwkmNKVPA6dsGD9ZUXWyTHqtaLTOJqK aA7n5mAVAp0X9BiWlaE0BfLTaIrKSDFmedexyZbRLiMSA6wq7s/J+UTb0XhznoBss5y0 jQvmQ1sM3gD/uPCM9avphI1M0DgHY82f9b5Lw=

What's missing is good documentation, I've created a bug to ensure I
follow through :

This is similar to a previous thread :

I'm working on the wiki, however, for right now :

The -calc <id>, -diff <id>, and -sync <id> options operate only on the
one object with the given <id>, for example, a group where the id is
the group name.

The -bulkCalc, -bulkDiff, and -bulkSync options operate on the
identifiers of all objects returned from the Grouper DataConnectors in
the Attribute Resolver configuration. All objects are provisioned by
default. An optional <GroupFilter> filters the objects to be

See "Group Filters" on

For example, to provision groups (and their members) in a specific stem :

<resolver:DataConnector id="GroupDataConnector"
<grouper:GroupFilter xsi:type="grouper:StemName" name="stem:name"
scope="SUB" />

<resolver:DataConnector id="MemberDataConnector"
<grouper:GroupFilter xsi:type="grouper:StemName" name="stem:name"
scope="SUB" />

There are more examples in the junit test cases of the grouper-shib project :

Hopefully this will be enough for now to keep you rolling. Of course,
let us know what else you need.


On Wed, Jul 14, 2010 at 9:46 AM, Paul Engle
> Hash: SHA1
> All,
> I'm slowly wrapping my head around the new ldappc-ng
> provisioning utility, and it looks great. But I don't
> immediately see a way to provision just a subtree of the
> grouper hierarchy as I did with ldappc with the
> <grouper-queries/> section. Am I missing something? When I do a
> - -calc <stemName>, the output doesn't have anything but that
> individual stem. Is there a way to make it recurse from a given
> point?
> In our current environment, I use several different instances
> of ldappc to provision separate sections of the grouper
> hierarchy in different manners (different objectclasses,
> attributes, etc.) It looks like the new provisioner will be
> able to handle this all in one configuration (yay!) But I'd
> like to be able to test the separate sections individually
> while I'm still learning without having to provision the entire
> database.
>  -paul
> - --
> Paul D. Engle              |  Rice University
> Sr. Systems Administrator  |  Information Technology - MS119
> (713)348-4702              |  PO Box 1892
>            |  Houston, TX 77252-1892
> Version: GnuPG v2.0.12 (MingW32)
> dbYAnR76FJAUAVJE+noyukXmClo6/ftj
> =jM4H

Archive powered by MHonArc 2.6.16.

Top of Page