Grouper Users - Open Discussion List

[Francesco Malvezzi <>]

Il 04/08/2010 14:58, Tom Zeller ha scritto:
> For a multi-valued cn :
> 
> <resolver:AttributeDefinition id="cn" xsi:type="ad:Simple" >
>  <resolver:Dependency ref="cn-extension" />
>  <resolver:Dependency ref="cn-name" />
> </resolver:AttributeDefinition>
> 
> <resolver:AttributeDefinition id="cn-extension" xsi:type="ad:Simple"
> sourceAttributeID="extension">
>  <resolver:Dependency ref="GroupDataConnector" />
> </resolver:AttributeDefinition>
> 
> <resolver:AttributeDefinition id="cn-name" xsi:type="ad:Simple"
> sourceAttributeID="name">
>  <resolver:Dependency ref="GroupDataConnector" />
> </resolver:AttributeDefinition>
> 
> I typed this up without trying it, but I think it will work :-)

it works like a charm,

> 
> TomZ
> 
> On Wed, Aug 4, 2010 at 7:50 AM, Tom Zeller 
> <>
>  wrote:
>> The sourceAttributeID of the group-dn and cn attribute should be the
>> same, probably "name" and not "extension".
>>
>> What ldap directory are you provisioning, OpenLDAP ?

yes, OpenLDAP2.4

>>
>> The cn attribute is multi-valued because ldappcng is provisioning
>> "cesia" and the DSA is (probably) provisioning the RDN
>> "unimore:cesia". Ldappcng is then trying to remove "unimore:cesia"
>> from the cn attribute, since ldappcng thinks cn should just be
>> "cesia", which will cause the DSA to complain.
>>
>> Make sense ?

it does. I missed the point about what "extension" means. Now I opted
for a single valued cn build after the group name.

thank you for the great support!

Francesco Malvezzi