Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] LDAPPCNG - Members not being provisioned

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] LDAPPCNG - Members not being provisioned


Chronological Thread 
  • From: Tom Zeller <>
  • To: Richard James <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] LDAPPCNG - Members not being provisioned
  • Date: Tue, 21 Sep 2010 15:24:21 -0500
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=hZW8Nww50v/Zr/GtWbWDTDLZ9rB5hfj13zHCpQLLx4gZpC11Yyr2AwEUnzLqB9KFcH uOAeUus0ub92e3bKFUjQTxmFvMVE47vJR0Wa7dVS4zZubOuDdUcEvO2ZD4TXC5tHK+/y EKT2VYeR/7MnvEwuw1/9zQS5x/LUVCGc7wNig=

Do you see ldap searches for cn=test at the $peopleOU base ?

As explanation, the error message below means that the identifier for
"test" from source "members-jdbc" cannot be resolved (determined) :

>>> 2010-09-20 15:06:48,140: [main] WARN
>>> PSOReferenceDefinition.getReferences(126) -  - get references for
>>> 'test:test' ref 'members-jdbc' unable to resolve identifier 'test'

SPML references are defined in ldappcng.xml :

<object id="group" authoritative="true">
<references name="member">
<reference ref="members-jdbc" toObject="member" />
...

The member identifier is defined in ldappcng.xml :

<object id="member">
<identifier ref="member-dn" baseId="${peopleOU}">
...

which resolves the "member-dn" attribute definition from
ldappcng-resolver.xml :

<resolver:AttributeDefinition id="member-dn" xsi:type="ad:Simple"
sourceAttributeID="psoID">
<resolver:Dependency ref="SpmlDataConnector" />
</resolver:AttributeDefinition>

which in turn resolves the SpmlDataConnector, which should search ldap :

<resolver:DataConnector id="SpmlDataConnector"
provider="ldap-provider" xsi:type="ldappc:SPMLDataConnector"
scope="subTree" base="${peopleOU}" returnData="identifier">
<resolver:Dependency ref="MemberDataConnector" />
<ldappc:FilterTemplate>(cn=${id.get(0)})</ldappc:FilterTemplate>
</resolver:DataConnector>

at your base :

# Base DN for members
peopleOU=OU=Campus Users,DC=testcampus,DC=ncl,DC=ac,DC=uk



Archive powered by MHonArc 2.6.16.

Top of Page