Grouper Users - Open Discussion List

[Scott Koranda <>]

Hi,

My ldappcng.xml file contains

<object id="stem">
      <identifier ref="stem-dn" baseId="${groupsOU}">
        <identifyingAttribute name="objectclass" value="organizationalUnit" />
      </identifier>
      <attribute name="objectClass" ref="stem-objectclass" />
      <attribute name="ou" ref="stem-ou" />
      <attribute name="description" ref="stem-description" />
</object>

I want to provision the stem A:B:C:D into LDAP with DN

ou=D,ou=C,ou=B,ou=A,ou=grouper,dc=ligo,dc=org

Note that the DN

ou=C,ou=B,ou=A,ou=grouper,dc=ligo,dc=org

already exists in LDAP.

When I run 

gsh.sh -ldappcng -calc A:B:C:D

it shows me

<ldappc:calcResponse
xmlns:ldappc='http://grouper.internet2.edu/ldappc'
status='success' requestID='2011/04/05-14:27:46.415_QWFMLUAJ'>
  <ldappc:id ID='A:B:C:D'/>
  <ldappc:pso entityName='stem'>
    <psoID
ID='ou=A:B:C:D,ou=C,ou=B,ou=A,ou=grouper,dc=ligo,dc=org'
targetID='ldap'/>
    <data>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='objectClass'>
        <dsml:value>top</dsml:value>
        <dsml:value>organizationalUnit</dsml:value>
      </dsml:attr>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='ou'>
        <dsml:value>A</dsml:value>
      </dsml:attr>
    </data>
  </ldappc:pso>
</ldappc:calcResponse>

and if I use -sync instead of -calc the provisioned DN is

ou=A:B:C:D,ou=C,ou=B,ou=A,ou=grouper,dc=ligo,dc=org

instead of what I want.

How can I adjust the stem provisioning configuration in 
ldappcng.xml so that I get the DN

ou=D,ou=C,ou=B,ou=A,ou=grouper,dc=ligo,dc=org

Note that in ldappc.properties I do have

ldappc.properties:DNstructure=bushy

Thanks,

Scott