Grouper Users - Open Discussion List

[Tom Zeller <>]

Great.

Just a comment to any folks following the list wondering about support
turnaround : I contacted Lawrence directly off-list and let him know
that my responses would be delayed, and hopefully in doing so, made
myself available if the issue was critical.

TomZ

On Mon, Nov 14, 2011 at 11:17 AM, Klug, Lawrence 
<>
 wrote:
> Tom,
>
> I believe the issue is resolved.  I had to modify the file where the 
> uclaMemeber objectClass attributes are defined:  ldappcng.xml
>
> bulkSync is working now.  I've got to document this for the UCLA team.
>
> Thanks,
>
> Lawrence
>
> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Klug, Lawrence
> Sent: Monday, November 14, 2011 8:23 AM
> To: Tom Zeller
> Cc: Grouper Users Mailing List
> Subject: RE: [grouper-users] RE: LDAPCNG Issues - follow up question
>
> Tom,
>
> Here is a snippet from running "bulkCalc" using the new configuration.  The 
> uclaMember objectClass is being picked up, but the attribute isMemberOf 
> should now be uclaIsMemberOf .  How can I fix this issue?
>
> Thanks,
>
> Lawrence
>
> -ldappcng -logSpml -printRequests -sync
>
>  <ldappc:calcResponse status='success' 
> requestID='2011/11/14-08:15:00.357_Q49YMIXY'>
>    <ldappc:id 
> ID='urn:mace:ucla.edu:ppid:person:C4196E1230C9452191D7E416FC4BD9F3'/>
>    <ldappc:pso entityName='member'>
>      <psoID 
> ID='uclappid=urn:mace:ucla.edu:ppid:person:C4196E1230C9452191D7E416FC4BD9F3,ou=people,dc=edtest,dc=ucla,dc=edu'
>  targetID='ldap'/>
>      <data>
>        <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' 
> name='objectClass'>
>          <dsml:value>uclaMember</dsml:value>
>        </dsml:attr>
>        <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' 
> name='isMemberOf'>
>          <dsml:value>etc:sysadmingroup</dsml:value>
>          <dsml:value>test:testGroup</dsml:value>
>        </dsml:attr>
>      </data>
>    </ldappc:pso>
>  </ldappc:calcResponse>
> </ldappc:bulkCalcResponse>
>
>
>
> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Klug, Lawrence
> Sent: Monday, November 14, 2011 7:48 AM
> To: Tom Zeller
> Cc: Grouper Users Mailing List
> Subject: RE: [grouper-users] RE: LDAPCNG Issues - follow up question
>
> I'm implementing the "uclaMember"  objectClass.  It's a bit confusing, so I 
> want to confirm with you.
>
> In ldappc-resolver I made these changes:
>
> Change this:
>
> <resolver:DataConnector id="StaticDataConnector" xsi:type="dc:Static">
>    <dc:Attribute id="group-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="group-objectclass-eduMember">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>      <dc:Value>eduMember</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="stem-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>organizationalUnit</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="member-objectclass">
>      <dc:Value>eduMember</dc:Value>
>    </dc:Attribute>
>  </resolver:DataConnector>
>
> To This:
>
>  <resolver:DataConnector id="StaticDataConnector" xsi:type="dc:Static">
>    <dc:Attribute id="group-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="group-objectclass-uclaMember">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>      <dc:Value>uclaMember</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="stem-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>organizationalUnit</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="member-objectclass">
>      <dc:Value>uclaMember</dc:Value>
>    </dc:Attribute>
>  </resolver:DataConnector>
>
> Change this:
>
> <resolver:AttributeDefinition id="group-objectclass-eduMember" 
> xsi:type="ad:Simple">
>    <resolver:Dependency ref="StaticDataConnector" />
>  </resolver:AttributeDefinition>
>
> To This:
>
>  <resolver:AttributeDefinition id="group-objectclass-uclaMember" 
> xsi:type="ad:Simple">
>    <resolver:Dependency ref="StaticDataConnector" />
>  </resolver:AttributeDefinition>
>
> Change this:
>
>  <resolver:AttributeDefinition id="hasMember" xsi:type="grouper:Member" 
> sourceAttributeID="members">
>    <resolver:Dependency ref="GroupDataConnector" />
>    <grouper:Attribute id="name" source="ldap" />
>    <grouper:Attribute id="name" source="g:gsa" />
>  </resolver:AttributeDefinition>
>
> To This:
>
>  <resolver:AttributeDefinition id="uclaHasMember" xsi:type="grouper:Member" 
> sourceAttributeID="members">
>    <resolver:Dependency ref="GroupDataConnector" />
>    <grouper:Attribute id="name" source="ldap" />
>    <grouper:Attribute id="name" source="g:gsa" />
>  </resolver:AttributeDefinition>
>
> Question:  Should this block be changed (isMemberOf => uclaIsMemberOf )?
>
>  <resolver:AttributeDefinition id="groupIsMemberOf" 
> xsi:type="grouper:Group" sourceAttributeID="groups">
>    <resolver:Dependency ref="GroupDataConnector" />
>    <grouper:Attribute id="name" />
>  </resolver:AttributeDefinition>
>
> Thanks,
>
> Lawrence
>