Grouper Users - Open Discussion List

[Tom Zeller <>]

We really should be able to synchronize groups from an LDAP directory
into Grouper. My apologies.

A few months ago (has it been that long ?) the idea was to write an
SPMLGrouperTarget and a modified LdapDataConnector for ldappcng, using
Shibboleth Attribute Resolver (IdP) extensions.

On a recent thread, Scott Koranda of LIGO also wanted to write a
custom provisioned target.

Anyone else ? Anyone interested in helping write such things ?

Cameron, I assume you want this now, what is your timeline ?

Thanks,
TomZ

On Wed, Feb 9, 2011 at 12:10 PM, cameron stewart 
<>
 wrote:
> Ok, I suppose that I thought it might be easier to get this data into 
> Grouper.  I wondered if maybe the import / export tool would do what I 
> needed but I found little information on what the structure of these forms 
> should be.  For what it's worth, we are currently using Sun Directory 
> server.
>
> Thanks,
>
> Cameron
>
>
> On Feb 9, 2011, at 11:03 AM, Chris Hyzer wrote:
>
>> Maybe someone has an example of this, or a better idea, but for one time 
>> use you could use a generated GSH script (from whatever programming 
>> language you want, or parse ldif or something).  I.e. if you can dump the 
>> data from ldap into a GSH script somehow...
>>
>> First declare a session:
>>
>> grouperSession = GrouperSession.startRootSession();
>>
>> then create each group:
>>
>> new 
>> GroupSave(grouperSession).assignName("folder1:folder2:group1").assignCreateParentStemsIfNotExist(true).save();
>> new 
>> GroupSave(grouperSession).assignName("folder1:folder2:group2").assignCreateParentStemsIfNotExist(true).save();
>> new 
>> GroupSave(grouperSession).assignName("folder3:folder4:group1").assignCreateParentStemsIfNotExist(true).save();
>>
>> then add members:
>>
>> addMember("folder1:folder2:group1", "subjectIdentifier1");
>> addMember("folder1:folder2:group1", "subjectIdentifier2");
>> addMember("folder1:folder2:group2", "subjectIdentifier1");
>>
>> Once all that stuff is in one file, run in gsh:
>>
>> ./gsh.sh myScriptFile.script
>>
>> If you need an example let us know and maybe someone could make one... let 
>> us know which type of directory you have and a description of the 
>> structure.
>>
>> Thanks,
>> Chris
>>
>>
>> -----Original Message-----
>> From: Cameron stewart 
>> [mailto:]
>> Sent: Wednesday, February 09, 2011 12:55 PM
>> To: 
>> ;
>>  Chris Hyzer
>> Subject: Re: RE: [grouper-users] How to import LDAP groups into Grouper?
>>
>> Thanks for the quick reply.
>>
>> I am currently using 1.6.2.
>>
>> By "sync-up" I mean that generally I would like to take all of my existing
>> LDAP groups and import them into Grouper.  Ideally, once I had this data in
>> Grouper, I could then manage those groups in Grouper, provision changes to
>> LDAP, and yes, potentially make this the system of record.
>>
>> Cameron
>
>