Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Provisioning multiple objects with ldappc-ng?

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Provisioning multiple objects with ldappc-ng?


Chronological Thread 
  • From: Paul Engle <>
  • To:
  • Subject: Re: [grouper-users] Provisioning multiple objects with ldappc-ng?
  • Date: Wed, 14 Jul 2010 11:50:21 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Awesome. I think that's exactly what I need. Thanks, Tom!

-paul

- --On Wednesday, July 14, 2010 11:21 AM -0500 Tom Zeller
<>
wrote:

> What's missing is good documentation, I've created a bug to
> ensure I follow through :
>
> https://bugs.internet2.edu/jira/browse/GRP-467
>
> This is similar to a previous thread :
>
> https://lists.internet2.edu/sympa/arc/grouper-users/2010-06/m
> sg00062.html
>
> I'm working on the wiki, however, for right now :
>
> The -calc <id>, -diff <id>, and -sync <id> options operate
> only on the one object with the given <id>, for example, a
> group where the id is the group name.
>
> The -bulkCalc, -bulkDiff, and -bulkSync options operate on the
> identifiers of all objects returned from the Grouper
> DataConnectors in the Attribute Resolver configuration. All
> objects are provisioned by default. An optional <GroupFilter>
> filters the objects to be provisioned.
>
> See "Group Filters" on
> https://spaces.internet2.edu/display/GrouperWG/Grouper+and+Sh
> ibboleth+Integration.
>
> For example, to provision groups (and their members) in a
> specific stem :
>
> <resolver:DataConnector id="GroupDataConnector"
> xsi:type="grouper:GroupDataConnector">
> <grouper:GroupFilter xsi:type="grouper:StemName"
> name="stem:name" scope="SUB" />
> </resolver:DataConnector>
>
> <resolver:DataConnector id="MemberDataConnector"
> xsi:type="grouper:MemberDataConnector">
> <grouper:GroupFilter xsi:type="grouper:StemName"
> name="stem:name" scope="SUB" />
> </resolver:DataConnector>
>
> There are more examples in the junit test cases of the
> grouper-shib project :
>
> http://anonsvn.internet2.edu/cgi-bin/viewvc.cgi/i2mi/tags/GRO
> UPER_1_6_0/ldappcng/grouper-shib/src/test/resources/test/edu/
> internet2/middleware/grouper/shibboleth/dataConnector/
>
> http://anonsvn.internet2.edu/cgi-bin/viewvc.cgi/i2mi/tags/GRO
> UPER_1_6_0/ldappcng/grouper-shib/src/test/resources/test/edu/
> internet2/middleware/grouper/shibboleth/dataConnector/GroupDa
> taConnectorTest-resolver.xml?revision=6828&view=co
>
> Hopefully this will be enough for now to keep you rolling. Of
> course, let us know what else you need.
>
> TomZ
>
> On Wed, Jul 14, 2010 at 9:46 AM, Paul Engle
> <>
> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>>
>> All,
>>
>> I'm slowly wrapping my head around the new ldappc-ng
>> provisioning utility, and it looks great. But I don't
>> immediately see a way to provision just a subtree of the
>> grouper hierarchy as I did with ldappc with the
>> <grouper-queries/> section. Am I missing something? When I
>> do a - -calc <stemName>, the output doesn't have anything
>> but that individual stem. Is there a way to make it recurse
>> from a given point?
>>
>> In our current environment, I use several different instances
>> of ldappc to provision separate sections of the grouper
>> hierarchy in different manners (different objectclasses,
>> attributes, etc.) It looks like the new provisioner will be
>> able to handle this all in one configuration (yay!) But I'd
>> like to be able to test the separate sections individually
>> while I'm still learning without having to provision the
>> entire database.
>>
>>  -paul
>>
>> - --
>> Paul D. Engle              |  Rice University
>> Sr. Systems Administrator  |  Information Technology -
>> MS119 (713)348-4702              |  PO Box 1892
>>
>>            |  Houston, TX 77252-1892
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2.0.12 (MingW32)
>>
>> iEYEARECAAYFAkw9zcoACgkQCpkISWtyHNuuDACfWANUuH7vPQhBOfYISSuy
>> f+Ql dbYAnR76FJAUAVJE+noyukXmClo6/ftj
>> =jM4H
>> -----END PGP SIGNATURE-----
>



- --
Paul D. Engle | Rice University
Sr. Systems Administrator | Information Technology - MS119
(713)348-4702 | PO Box 1892

| Houston, TX 77252-1892
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (MingW32)

iEYEARECAAYFAkw96s4ACgkQCpkISWtyHNvVnQCfT6kpWTDybdfMAnkCC23xnhcE
TcEAn1BR+yo2bV2H/Lx660SWd/9gbvO6
=WKWh
-----END PGP SIGNATURE-----




Archive powered by MHonArc 2.6.16.

Top of Page