Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] ldappc-ng and deprovisioning of isMemberOf attribute

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] ldappc-ng and deprovisioning of isMemberOf attribute


Chronological Thread 
  • From: Tom Zeller <>
  • To: Scott Koranda <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] ldappc-ng and deprovisioning of isMemberOf attribute
  • Date: Thu, 7 Apr 2011 08:10:38 -0500
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type; b=K83GObA4rueC3kZ6/ohAayTtVl8pa27nkFKRmkFW5Y0q5PdybAWhOYd41VGIY5gCwD V8x/I8m6RYeyo5xftKtrXy+wNFncav3/OZQEQ/oDqRlNniJsjkncarBZ8rJ4/vklQv5/ jdbX28KrgtsZwBEKw8ckN5Z0xE29ueuCV6TFY=

> Bug. The -interval option selects groups that have been changed during
> the specified interval for provisioning as well as their members. If a
> member has been removed, it is no longer considered for provisioning.
>
> I see 3 options :
>
> 1. support incremental provisioning (we are actively figuring this
> out, no code yet)
> 2. When using -interval, do a full sync at some configurable interval, say
> 24h
> 3. support Member.lastModifyTime (and Stem.lastModifyTime, etc)
>
> I think #2 might be realistic in the short term.

And #4 is that ldappcng should consume the changelog, performing a
calc operation on the identifier of every object changed. Not
incremental provisioning, but "full sync" provisioning on every
object, as part of a fifo changelog queue.



Archive powered by MHonArc 2.6.16.

Top of Page