Grouper Users - Open Discussion List

[Tom Zeller <>]

> Whenever I create a group in Grouper and try to sync, it tries to create an
> entry in LDAP like this:
>
> cn=Groups:groupname,o=organization,c=US
>
> our LDAP is formatted such that it would like to have this:
>
> ou=Groups,ou=groupname,o=organization,c=US
>
> Specifically, note that Groups (an already existing ou) is an ou, not cn.
> Also, the ':'.
>
> What would I edit to change this, or can I even do this?

You could script the <AttributeDefinition id="group-dn"> in 
ldappc-resolver.xml.

I didn't try this, but it should be close :

<resolver:AttributeDefinition id="group-dn"
  xsi:type="ldappc:PSOIdentifier"
  sourceAttributeID="mungDN" >
 <resolver:Dependency ref="mungDN" />
</resolver:AttributeDefinition

<resolver:AttributeDefinition xsi:type="Script"
  xmlns="urn:mace:shibboleth:2.0:resolver:ad"
  id="mungDN" >
  <resolver:Dependency ref="GroupDataConnector" />
  <Script><![CDATA[
    
importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);

   // value = "groupName:stem:rootStem";
   value = name.getValues().get(0);

  // mungDN : ou=Groups,ou=groupname,o=organization,c=US
  mungDN = new BasicAttribute("mungDN");
  mungDN.getValues().add("OU=Groups,ou=" + value + ",o=organization,c=US");

 ]]></Script>
</resolver:AttributeDefinition>

[1] https://lists.internet2.edu/sympa/arc/grouper-users/2011-03/msg00021.html

[2] 
https://spaces.internet2.edu/display/SHIB2/ResolverScriptAttributeDefinition

[3] https://spaces.internet2.edu/display/SHIB2/IdPAddAttribute