Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] How to import LDAP groups into Grouper?

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] How to import LDAP groups into Grouper?

Chronological Thread 
  • From: Tom Zeller <>
  • To: cameron stewart <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] How to import LDAP groups into Grouper?
  • Date: Wed, 9 Feb 2011 12:38:58 -0600
  • Domainkey-signature: a=rsa-sha1; c=nofws;; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=gYCcMycu5v+hisrYVaCCITc7OYzyIEP6Pohfs9oZm5D2nAz567fCQFQ0pBFgM8MQpW faMxH7H0eS2qXqM57DgejR4RKcwvP6LGE8Zw8yv58IuD0eaURB82VRXGvgcImcYnKOnt EHCELBdUjWwjq6j4opIH4CrnJKXzfZ0MjBOKI=

We really should be able to synchronize groups from an LDAP directory
into Grouper. My apologies.

A few months ago (has it been that long ?) the idea was to write an
SPMLGrouperTarget and a modified LdapDataConnector for ldappcng, using
Shibboleth Attribute Resolver (IdP) extensions.

On a recent thread, Scott Koranda of LIGO also wanted to write a
custom provisioned target.

Anyone else ? Anyone interested in helping write such things ?

Cameron, I assume you want this now, what is your timeline ?


On Wed, Feb 9, 2011 at 12:10 PM, cameron stewart
> Ok, I suppose that I thought it might be easier to get this data into
> Grouper.  I wondered if maybe the import / export tool would do what I
> needed but I found little information on what the structure of these forms
> should be.  For what it's worth, we are currently using Sun Directory
> server.
> Thanks,
> Cameron
> On Feb 9, 2011, at 11:03 AM, Chris Hyzer wrote:
>> Maybe someone has an example of this, or a better idea, but for one time
>> use you could use a generated GSH script (from whatever programming
>> language you want, or parse ldif or something).  I.e. if you can dump the
>> data from ldap into a GSH script somehow...
>> First declare a session:
>> grouperSession = GrouperSession.startRootSession();
>> then create each group:
>> new
>> GroupSave(grouperSession).assignName("folder1:folder2:group1").assignCreateParentStemsIfNotExist(true).save();
>> new
>> GroupSave(grouperSession).assignName("folder1:folder2:group2").assignCreateParentStemsIfNotExist(true).save();
>> new
>> GroupSave(grouperSession).assignName("folder3:folder4:group1").assignCreateParentStemsIfNotExist(true).save();
>> then add members:
>> addMember("folder1:folder2:group1", "subjectIdentifier1");
>> addMember("folder1:folder2:group1", "subjectIdentifier2");
>> addMember("folder1:folder2:group2", "subjectIdentifier1");
>> Once all that stuff is in one file, run in gsh:
>> ./ myScriptFile.script
>> If you need an example let us know and maybe someone could make one... let
>> us know which type of directory you have and a description of the
>> structure.
>> Thanks,
>> Chris
>> -----Original Message-----
>> From: Cameron stewart
>> [mailto:]
>> Sent: Wednesday, February 09, 2011 12:55 PM
>> To:
>> ;
>> Chris Hyzer
>> Subject: Re: RE: [grouper-users] How to import LDAP groups into Grouper?
>> Thanks for the quick reply.
>> I am currently using 1.6.2.
>> By "sync-up" I mean that generally I would like to take all of my existing
>> LDAP groups and import them into Grouper.  Ideally, once I had this data in
>> Grouper, I could then manage those groups in Grouper, provision changes to
>> LDAP, and yes, potentially make this the system of record.
>> Cameron

Archive powered by MHonArc 2.6.16.

Top of Page