Grouper Users - Open Discussion List

[Tom Zeller <>]

> Group name in Grouper:
> SAP:Science:Botany:Administrator:create-whitelist
>
> Name required in AD:
> OU=Account,OU=Objects,OU=Administrators,OU=Science,DC=Botany,DC=example,DC=edu
>
> Is there a way we can transform above group name formats, in LDAPPCNG,
> from Grouper to AD?
>

This might help you get started :

  <resolver:AttributeDefinition id="group-dn"
xsi:type="ldappc:PSOIdentifier" sourceAttributeID="mungDN" >
    <resolver:Dependency ref="mungDN" />
  </resolver:AttributeDefinition>

  <resolver:AttributeDefinition xsi:type="Script"
xmlns="urn:mace:shibboleth:2.0:resolver:ad" id="mungDN" >
    <resolver:Dependency ref="GroupDataConnector" />
    <Script><![CDATA[
      // Import Shibboleth attribute provider
      
importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);

      // value = "SAP:Science:Botany:Administrator:create-whitelist";
      value = name.getValues().get(0);

      values = value.split(':');

      // mungDN =
OU=Account,OU=Objects,OU=Administrators,OU=Science,DC=Botany,DC=example,DC=edu
      mungDN = new BasicAttribute("mungDN");
      mungDN.getValues().add("OU=Account,OU=Objects,OU=Administrators,OU="
+ values[1] + ",OU=" + values[2] + ",DC=example,DC=edu");
      ]]></Script>
  </resolver:AttributeDefinition>