Grouper Users - Open Discussion List

[Richard James <>]

Defining the groupfilter as part of the StemDataConnector works :)

I have added a page to our section on the Grouper wiki which documents some 
of the steps that we took for provisioning to the Active Directory using 
LDAPPCNG.

https://spaces.internet2.edu/display/Grouper/Newcastle+University+-+LDAPPCNG+Provisioning+to+the+Active+Directory

Thanks Richie.



>-----Original Message-----
>From: 
>
> 
>[mailto:]
> On Behalf Of Tom
>Zeller
>Sent: 23 February 2011 15:14
>To: Richard James
>Cc: grouper users list
>Subject: Re: [grouper-users] Empty stem structures created when using
>LDAPPCNG into the AD
>
>> We have successfully been testing LDAPPCNG provisioning from Grouper
>into the Active Directory, and have been working on filtering out the
>groups that we need provisioned. We have this working at the moment by
>defining a group filter in the GroupDataConnector, this currently
>filters on stems,
>>
>> <resolver:DataConnector id="GroupDataConnector"
>xsi:type="grouper:GroupDataConnector">
>> <grouper:GroupFilter xsi:type="grouper:Minus">
>>    <grouper:GroupFilter xsi:type="grouper:StemName"
>name="Applications:Filestores:ISS" scope="SUB" />
>>    <grouper:GroupFilter xsi:type="grouper:StemName"
>name="CorporateData" scope="SUB"/>
>>  </grouper:GroupFilter>
>>   <grouper:Attribute id="members" />
>>    <grouper:Attribute id="groups" />
>>  </resolver:DataConnector>
>>
>> This successfully provisions the groups that live under
>"Applications:Filestores:ISS", however it creates the stem structure for
>CorporateData, i.e. it will create the hierarchical folders for our org
>structure without the actual departmental groups.
>>
>> Is there anything that we need to add to the Ldappc-resolver to stop
>empty folders being created within the AD? Maybe a filter within the
>StemDataConnector?
>
>Yes, add the same <GroupFilter ... /> element of your
>GroupDataConnector to the StemDataConnector. Does that work ?
>
>TomZ