Grouper Users - Open Discussion List

[cameron stewart <>]

Thanks for the reply Tom,

We are currently working our way through a sort of Identity Management 
overhaul right now and one of the facets of this project is some sort of 
centralized group management.  We currently have several sources for ID's, 
groups, etc... and are really looking for a way to tie all of the groups 
together and centrally manage them.  Grouper looks promising.  

> 
> Cameron, I assume you want this now, what is your timeline ?
> 

No timeline to speak of, we are only in the experimental phase of this, but 
having some form of group management is becoming a major initiative for me 
and I would like to get something out there sooner than later. 


Cameron


> Thanks,
> TomZ
> 
> On Wed, Feb 9, 2011 at 12:10 PM, cameron stewart 
> <>
>  wrote:
>> Ok, I suppose that I thought it might be easier to get this data into 
>> Grouper.  I wondered if maybe the import / export tool would do what I 
>> needed but I found little information on what the structure of these forms 
>> should be.  For what it's worth, we are currently using Sun Directory 
>> server.
>> 
>> Thanks,
>> 
>> Cameron
>> 
>> 
>> On Feb 9, 2011, at 11:03 AM, Chris Hyzer wrote:
>> 
>>> Maybe someone has an example of this, or a better idea, but for one time 
>>> use you could use a generated GSH script (from whatever programming 
>>> language you want, or parse ldif or something).  I.e. if you can dump the 
>>> data from ldap into a GSH script somehow...
>>> 
>>> First declare a session:
>>> 
>>> grouperSession = GrouperSession.startRootSession();
>>> 
>>> then create each group:
>>> 
>>> new 
>>> GroupSave(grouperSession).assignName("folder1:folder2:group1").assignCreateParentStemsIfNotExist(true).save();
>>> new 
>>> GroupSave(grouperSession).assignName("folder1:folder2:group2").assignCreateParentStemsIfNotExist(true).save();
>>> new 
>>> GroupSave(grouperSession).assignName("folder3:folder4:group1").assignCreateParentStemsIfNotExist(true).save();
>>> 
>>> then add members:
>>> 
>>> addMember("folder1:folder2:group1", "subjectIdentifier1");
>>> addMember("folder1:folder2:group1", "subjectIdentifier2");
>>> addMember("folder1:folder2:group2", "subjectIdentifier1");
>>> 
>>> Once all that stuff is in one file, run in gsh:
>>> 
>>> ./gsh.sh myScriptFile.script
>>> 
>>> If you need an example let us know and maybe someone could make one... 
>>> let us know which type of directory you have and a description of the 
>>> structure.
>>> 
>>> Thanks,
>>> Chris
>>> 
>>> 
>>> -----Original Message-----
>>> From: Cameron stewart 
>>> [mailto:]
>>> Sent: Wednesday, February 09, 2011 12:55 PM
>>> To: 
>>> ;
>>>  Chris Hyzer
>>> Subject: Re: RE: [grouper-users] How to import LDAP groups into Grouper?
>>> 
>>> Thanks for the quick reply.
>>> 
>>> I am currently using 1.6.2.
>>> 
>>> By "sync-up" I mean that generally I would like to take all of my existing
>>> LDAP groups and import them into Grouper.  Ideally, once I had this data 
>>> in
>>> Grouper, I could then manage those groups in Grouper, provision changes to
>>> LDAP, and yes, potentially make this the system of record.
>>> 
>>> Cameron
>> 
>>