Grouper Users - Open Discussion List

[Tom Zeller <>]

What's missing is good documentation, I've created a bug to ensure I
follow through :

https://bugs.internet2.edu/jira/browse/GRP-467

This is similar to a previous thread :

https://lists.internet2.edu/sympa/arc/grouper-users/2010-06/msg00062.html

I'm working on the wiki, however, for right now :

The -calc <id>, -diff <id>, and -sync <id> options operate only on the
one object with the given <id>, for example, a group where the id is
the group name.

The -bulkCalc, -bulkDiff, and -bulkSync options operate on the
identifiers of all objects returned from the Grouper DataConnectors in
the Attribute Resolver configuration. All objects are provisioned by
default. An optional <GroupFilter> filters the objects to be
provisioned.

See "Group Filters" on
https://spaces.internet2.edu/display/GrouperWG/Grouper+and+Shibboleth+Integration.

For example, to provision groups (and their members) in a specific stem :

<resolver:DataConnector id="GroupDataConnector"
xsi:type="grouper:GroupDataConnector">
    <grouper:GroupFilter xsi:type="grouper:StemName" name="stem:name"
scope="SUB" />
</resolver:DataConnector>

<resolver:DataConnector id="MemberDataConnector"
xsi:type="grouper:MemberDataConnector">
    <grouper:GroupFilter xsi:type="grouper:StemName" name="stem:name"
scope="SUB" />
</resolver:DataConnector>

There are more examples in the junit test cases of the grouper-shib project :

http://anonsvn.internet2.edu/cgi-bin/viewvc.cgi/i2mi/tags/GROUPER_1_6_0/ldappcng/grouper-shib/src/test/resources/test/edu/internet2/middleware/grouper/shibboleth/dataConnector/

http://anonsvn.internet2.edu/cgi-bin/viewvc.cgi/i2mi/tags/GROUPER_1_6_0/ldappcng/grouper-shib/src/test/resources/test/edu/internet2/middleware/grouper/shibboleth/dataConnector/GroupDataConnectorTest-resolver.xml?revision=6828&view=co

Hopefully this will be enough for now to keep you rolling. Of course,
let us know what else you need.

TomZ

On Wed, Jul 14, 2010 at 9:46 AM, Paul Engle 
<>
 wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> All,
>
> I'm slowly wrapping my head around the new ldappc-ng
> provisioning utility, and it looks great. But I don't
> immediately see a way to provision just a subtree of the
> grouper hierarchy as I did with ldappc with the
> <grouper-queries/> section. Am I missing something? When I do a
> - -calc <stemName>, the output doesn't have anything but that
> individual stem. Is there a way to make it recurse from a given
> point?
>
> In our current environment, I use several different instances
> of ldappc to provision separate sections of the grouper
> hierarchy in different manners (different objectclasses,
> attributes, etc.) It looks like the new provisioner will be
> able to handle this all in one configuration (yay!) But I'd
> like to be able to test the separate sections individually
> while I'm still learning without having to provision the entire
> database.
>
>  -paul
>
> - --
> Paul D. Engle              |  Rice University
> Sr. Systems Administrator  |  Information Technology - MS119
> (713)348-4702              |  PO Box 1892
> 
>             |  Houston, TX 77252-1892
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.12 (MingW32)
>
> iEYEARECAAYFAkw9zcoACgkQCpkISWtyHNuuDACfWANUuH7vPQhBOfYISSuyf+Ql
> dbYAnR76FJAUAVJE+noyukXmClo6/ftj
> =jM4H
> -----END PGP SIGNATURE-----