Grouper Users - Open Discussion List

[Tom Zeller <>]

Do you see ldap searches for cn=test at the $peopleOU base ?

As explanation, the error message below means that the identifier for
"test" from source "members-jdbc" cannot be resolved (determined) :

>>> 2010-09-20 15:06:48,140: [main] WARN
>>> PSOReferenceDefinition.getReferences(126) -  - get references for
>>> 'test:test' ref 'members-jdbc' unable to resolve identifier 'test'

SPML references are defined in ldappcng.xml :

   <object id="group" authoritative="true">
      <references name="member">
        <reference ref="members-jdbc" toObject="member" />
        ...

The member identifier is defined in ldappcng.xml :

    <object id="member">
      <identifier ref="member-dn" baseId="${peopleOU}">
      ...

which resolves the "member-dn" attribute definition from 
ldappcng-resolver.xml :

  <resolver:AttributeDefinition id="member-dn" xsi:type="ad:Simple"
sourceAttributeID="psoID">
    <resolver:Dependency ref="SpmlDataConnector" />
  </resolver:AttributeDefinition>

which in turn resolves the SpmlDataConnector, which should search ldap :

  <resolver:DataConnector id="SpmlDataConnector"
provider="ldap-provider" xsi:type="ldappc:SPMLDataConnector"
    scope="subTree" base="${peopleOU}" returnData="identifier">
    <resolver:Dependency ref="MemberDataConnector" />
    <ldappc:FilterTemplate>(cn=${id.get(0)})</ldappc:FilterTemplate>
  </resolver:DataConnector>

at your base :

# Base DN for members
peopleOU=OU=Campus Users,DC=testcampus,DC=ncl,DC=ac,DC=uk