Grouper Users - Open Discussion List

[Brigitte Wallaert Taquet <>]

Hello,

Probably the loader from ldap would be good for me but I'm in 1.6.3  
and have to go in production quickly.

So, could you explain me which code you propose : it is a modify for  
LiteUI or for GrouperShell or for command findAll ?

Thanks !
Brigitte
Quoting Chris Hyzer 
<>:

> Yes, you can have a different sources.xml for gsh and ui.  In   
> Grouper 2.1 there is a loader from ldap:
>
> https://spaces.internet2.edu/display/Grouper/Grouper+-+Loader+LDAP
>
> I assume you cant wait a few months for this :)  Or maybe you can   
> get something working now, and then migrate to the loader later and   
> switch your sources.xml back.
>
> Another option is I can give you some code from 2.1 in a jar that   
> you could run temporarily until you upgrade to 2.1...
>
> Thanks,
> Chris
>
> -----Original Message-----
> From: Brigitte Wallaert Taquet 
> [mailto:]
> Sent: Friday, October 07, 2011 2:42 PM
> To: Chris Hyzer
> Cc: Tom Zeller; 
>
> Subject: RE: [grouper-users] sources.xml ldap and script groupershell
>
> Hello,
>
> Yes, I need for my script GrouperShell (folder-grouper/bin/gsh.sh
> myscript.gsh) to search all subjects for whom the attribute ldap
> "ustlRole" is valued (ustlRole=*) and then attach these subjects to a
> group named "ustlRoletemoin".
>
> Initially, I ask first ldap with dircontext and after, I transform
> each identifier received (uid) in subject Grouper (with findAll on
> identifier "uid") but my administrator ldap says that I ask 2 times
> for the same things so he doesn't agree.
>
> So, I think use only findAll in my groupershell script to search on
> attribute ustlRole=* instead on uid and displayName. But for LiteUi, I
> need that the search for a subject (findAll too it seems ?) continue
> to use uid and displayName attributes to do the search.
>
> I hope it is more clearly ?
>
> So, if I understand what you say, it's perhaps possible if I can have
> 2 sources.xml différents ; one for my script and one for LiteUi ? but
> how ? Now, I do that but I have to modify sources.xml if I need to
> deploy again Grouper-API for Grouper-UI, it is not very good I think !
>
> Thanks for your help.
>
> Cordialement
> Brigitte
>
>
>
> Quoting Chris Hyzer 
> <>:
>
> > Not sure I completely understand, but findAll cannot have a
> > parameter of where it is being called from, it is consistent.  But
> > you can have a slightly different sources.xml in your UI as opposed
> > to WS or something else.  Can you explain what you need in a
> > different way?  :)
> >
> > Thanks,
> > Chris
> >
> > -----Original Message-----
> > From: Wallaert-Taquet Brigitte 
> > [mailto:]
> > Sent: Friday, October 07, 2011 5:54 AM
> > To: Chris Hyzer; Tom Zeller
> > Cc: 
> >
> > Subject: Re: [grouper-users] sources.xml ldap and script groupershell
> >
> > Hello,
> >
> > Thanks a lot for your indications : effectively, the logs show me the
> > asks which was ok and finally, the administrator's ldap find that the
> > attribute "ustlRole" was protected and my server wasn't the rights to
> > bind with connection ldap anonyme.
> >
> > Are you using GrouperJndiSourceAdapter in sources.xml ?
> >
> >   <source
> > adapterClass="edu.internet2.middleware.grouper.subj.GrouperJndiSourceAdapter"
> > ...>
> >
> > Yes
> >
> > Now I have problem because if I modify the search in sources.xml for my
> > groupershell, the LiteUI will not find the subject correctly (because
> > ask on ustlRole attribute instead on uid/displayName attributes).
> > So, do you think it is possible to parameter somewhere for
> > SubjectFinder.findAll use another search defined in sources.xml (for
> > example, I can define another searchType named "searchUstlRole" in my
> > sources.xml) or to parameter LiteUI and AdminUi to use another searchType ?
> >
> > Thanks a lot !
> > Brigitte
> >
> >
> > Le 06/10/2011 05:34, Chris Hyzer a écrit :
> > > Search is used in SubjectFinder.findAll e.g. on the UI when you do
> > > a search for a subject...
> > >
> > > Thanks,
> > > Chris
> > >
> > > -----Original Message-----
> > > From: 
> > >
> > > [mailto:]
> > >  On Behalf Of
> > > Wallaert-Taquet Brigitte
> > > Sent: Wednesday, October 05, 2011 5:32 AM
> > > To: 
> > >
> > > Subject: [grouper-users] sources.xml ldap and script groupershell
> > >
> > > Hello,
> > >
> > > I make a script that have to populate a group (named "ustlroletemoin")
> > > for people LDAP for whom attribute ldap "ustlRole" have a value.
> > >
> > > So, I modify sources.xml for the search asks on ustlRole attribute (I
> > > don't know exactly when this search is used ?):
> > >
> > > <search>
> > > <searchType>search</searchType>
> > > <param>
> > > <param-name>filter</param-name>
> > > <param-value>
> > >                   (ustlRole=%TERM%)
> > > <--------------------------------------------------
> > > </param-value>
> > > </param>
> > > <param>
> > > <param-name>scope</param-name>
> > > <param-value>
> > >                   SUBTREE_SCOPE
> > > </param-value>
> > > </param>
> > > <param>
> > > <param-name>base</param-name>
> > > <param-value>
> > >                   ou=people,dc=univ-lille1,dc=fr
> > > </param-value>
> > > </param>
> > > </search>
> > >
> > > But I don't find a method that ask with this search ? It seems that
> > > SubjectFinder.findAll asks only on searchSubject in sources.xml ?
> > >
> > > Before to put "*" (!), I try this and I have no results although there
> > > are persons who have ustlRole=IntranetTest-users :
> > >
> > > for (Subject sujet : SubjectFinder.findAll("IntranetTest-users")) {
> > > groupetemoin.addMember(sujet,false); nbreusersajoutes+=1; } }
> > >
> > > result : entree and nbreuserajoutes=0
> > >
> > > Thanks a lot !
> >
> >
> > --
> > Brigitte Wallaert-Taquet
> > Ingénieure d'études
> > Chargée d'étude
> > Espace collaboratif de Documents
> > Université Lille1
> > Sciences et Technologies