Grouper Users - Open Discussion List

[Francesco Malvezzi <>]

Il 20/02/2012 16:43, Tom Zeller ha scritto:
> (mobile) Find out why more than one cn=unimiore... or whatever ldap
> entry is being found, probably because two objects with objectclass
> edumember have the same rdn, under different identifier container ids
> (base dns for people and for groups).

well, there is just one object with cn=unimore:domains:unimore:test, and
it is a group. No user with the same cn

> 
> Does this help ? What are the <identifyingAttribute/>s in your
> configuration, ldappcng.xml ?

<object id="group" authoritative="true">
      <identifier ref="group-dn" baseId="${groupsOU}">
        <identifyingAttribute name="objectClass"
value="${groupObjectClass}" />
      </identifier>
      <attribute name="objectClass" ref="group-objectclass-eduMember" />
      <attribute name="cn" />
      <attribute name="description" />
      <attribute name="gidNumber" />
      <attribute name="isMemberOf" ref="groupIsMemberOf" />
      <attribute name="memberUid" ref="hasMember" />
      <attribute name="hasMember" ref="hasMember" />
      <references name="member" emptyValue="" >
        <reference ref="members-jdbc" toObject="member" />
        <reference ref="members-g:gsa" toObject="group" />
      </references>
    </object>

groupObjectClass is groupOfNames (in ldappc.properties)
> 
> Oh, and, this definitely us not standard spmlv2, it's something more
> like zml.

Is there something wrong with it?

thank you so much for the quick answer!

Francesco