Subject: Grouper Users - Open Discussion List
- From: Tom Zeller <>
- To: "Bodine, James" <>
- Cc: "" <>
- Subject: Re: [grouper-users] Grouper & Ldap
- Date: Thu, 23 Sep 2010 09:55:21 -0500
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=Oht8p56RwWq7GLj7R+iBW0SI0vyfufDiBHCw1cZoRQj1cKCsEaj32xCyyUmEC/3BMR rCn6Z68NBMvpx2pUXf5/b5ACLU/Ecp+DzSOVT/mqAithjVyPuQntTx2vCEL7taImQTFi 28V0aR/Zrsgh/grHWTgQEeAJSHd2HJo5XFuz4=
> Can existing groups in ldap (active directory) be managed using Grouper and
> the ldappc-ng tool? If so, how would I import those groups and their
> memberships into Grouper.
We don't currently provide a tool to import groups from an ldap
directory into Grouper.
I've been thinking about a bi- (or uni-) directional sync from AD into
Grouper because some folks want to use to their AD tools, but we still
want central management for provisioning to other directories. Sounds
like a to-be-written Grouper Loader job.
Writing a java program to import from ldap into Grouper would be
straightforward, given interest and time :-)
> Can the stem name be removed when provisioning the group so that I don’t end
> up with stem:group name as the name of the group when it is provisioned into
> Active Directory?
Yes, assuming you are using a configuration similar to
in the following :
<resolver:Dependency ref="GroupDataConnector" />
If your structure is "flat" (and not "bushy") you will have to enforce
namespace uniqueness yourself, as we do at Memphis.
- [grouper-users] Grouper & Ldap, Bodine, James, 09/23/2010
- Re: [grouper-users] Grouper & Ldap, Tom Zeller, 09/23/2010
Archive powered by MHonArc 2.6.16.