Grouper Users - Open Discussion List

["Klug, Lawrence" <>]

Tom,

Thanks for keeping in touch while you were away.  I have another question 
about the operation of ldapcng.  We implemented the uclaMember objectClass  
and it seems to be working okay.  However, it looks like the only attribute 
being populated for each  member is the uclappid attribute.   My question:  
how/where do we configure additional member attributes so they are populated 
during sync?  When we were using eduMember objectClass  there were more 
attributes.

Thanks,

Lawrence



-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Tom Zeller
Sent: Wednesday, November 16, 2011 10:04 AM
To: Klug, Lawrence
Cc: Grouper Users Mailing List
Subject: Re: [grouper-users] RE: LDAPCNG Issues - follow up question

Great.

Just a comment to any folks following the list wondering about support 
turnaround : I contacted Lawrence directly off-list and let him know that my 
responses would be delayed, and hopefully in doing so, made myself available 
if the issue was critical.

TomZ

On Mon, Nov 14, 2011 at 11:17 AM, Klug, Lawrence 
<>
 wrote:
> Tom,
>
> I believe the issue is resolved.  I had to modify the file where the 
> uclaMemeber objectClass attributes are defined:  ldappcng.xml
>
> bulkSync is working now.  I've got to document this for the UCLA team.
>
> Thanks,
>
> Lawrence
>
> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Klug, 
> Lawrence
> Sent: Monday, November 14, 2011 8:23 AM
> To: Tom Zeller
> Cc: Grouper Users Mailing List
> Subject: RE: [grouper-users] RE: LDAPCNG Issues - follow up question
>
> Tom,
>
> Here is a snippet from running "bulkCalc" using the new configuration.  The 
> uclaMember objectClass is being picked up, but the attribute isMemberOf 
> should now be uclaIsMemberOf .  How can I fix this issue?
>
> Thanks,
>
> Lawrence
>
> -ldappcng -logSpml -printRequests -sync
>
>  <ldappc:calcResponse status='success' 
> requestID='2011/11/14-08:15:00.357_Q49YMIXY'>
>    <ldappc:id 
> ID='urn:mace:ucla.edu:ppid:person:C4196E1230C9452191D7E416FC4BD9F3'/>
>    <ldappc:pso entityName='member'>
>      <psoID 
> ID='uclappid=urn:mace:ucla.edu:ppid:person:C4196E1230C9452191D7E416FC4
> BD9F3,ou=people,dc=edtest,dc=ucla,dc=edu' targetID='ldap'/>
>      <data>
>        <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' 
> name='objectClass'>
>          <dsml:value>uclaMember</dsml:value>
>        </dsml:attr>
>        <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' 
> name='isMemberOf'>
>          <dsml:value>etc:sysadmingroup</dsml:value>
>          <dsml:value>test:testGroup</dsml:value>
>        </dsml:attr>
>      </data>
>    </ldappc:pso>
>  </ldappc:calcResponse>
> </ldappc:bulkCalcResponse>
>
>
>
> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Klug, 
> Lawrence
> Sent: Monday, November 14, 2011 7:48 AM
> To: Tom Zeller
> Cc: Grouper Users Mailing List
> Subject: RE: [grouper-users] RE: LDAPCNG Issues - follow up question
>
> I'm implementing the "uclaMember"  objectClass.  It's a bit confusing, so I 
> want to confirm with you.
>
> In ldappc-resolver I made these changes:
>
> Change this:
>
> <resolver:DataConnector id="StaticDataConnector" xsi:type="dc:Static">
>    <dc:Attribute id="group-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="group-objectclass-eduMember">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>      <dc:Value>eduMember</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="stem-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>organizationalUnit</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="member-objectclass">
>      <dc:Value>eduMember</dc:Value>
>    </dc:Attribute>
>  </resolver:DataConnector>
>
> To This:
>
>  <resolver:DataConnector id="StaticDataConnector" 
> xsi:type="dc:Static">
>    <dc:Attribute id="group-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="group-objectclass-uclaMember">
>      <dc:Value>top</dc:Value>
>      <dc:Value>${groupObjectClass}</dc:Value>
>      <dc:Value>uclaMember</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="stem-objectclass">
>      <dc:Value>top</dc:Value>
>      <dc:Value>organizationalUnit</dc:Value>
>    </dc:Attribute>
>    <dc:Attribute id="member-objectclass">
>      <dc:Value>uclaMember</dc:Value>
>    </dc:Attribute>
>  </resolver:DataConnector>
>
> Change this:
>
> <resolver:AttributeDefinition id="group-objectclass-eduMember" 
> xsi:type="ad:Simple">
>    <resolver:Dependency ref="StaticDataConnector" />
>  </resolver:AttributeDefinition>
>
> To This:
>
>  <resolver:AttributeDefinition id="group-objectclass-uclaMember" 
> xsi:type="ad:Simple">
>    <resolver:Dependency ref="StaticDataConnector" />
>  </resolver:AttributeDefinition>
>
> Change this:
>
>  <resolver:AttributeDefinition id="hasMember" 
> xsi:type="grouper:Member" sourceAttributeID="members">
>    <resolver:Dependency ref="GroupDataConnector" />
>    <grouper:Attribute id="name" source="ldap" />
>    <grouper:Attribute id="name" source="g:gsa" />
>  </resolver:AttributeDefinition>
>
> To This:
>
>  <resolver:AttributeDefinition id="uclaHasMember" 
> xsi:type="grouper:Member" sourceAttributeID="members">
>    <resolver:Dependency ref="GroupDataConnector" />
>    <grouper:Attribute id="name" source="ldap" />
>    <grouper:Attribute id="name" source="g:gsa" />
>  </resolver:AttributeDefinition>
>
> Question:  Should this block be changed (isMemberOf => uclaIsMemberOf )?
>
>  <resolver:AttributeDefinition id="groupIsMemberOf" 
> xsi:type="grouper:Group" sourceAttributeID="groups">
>    <resolver:Dependency ref="GroupDataConnector" />
>    <grouper:Attribute id="name" />
>  </resolver:AttributeDefinition>
>
> Thanks,
>
> Lawrence
>