Grouper Users - Open Discussion List

[Tom Zeller <>]

Could you reply with the <identifyingAttribute/> elements of all
<object>s in your configuration, ldappcng.xml, please ?

Given the following example configuration :

 <object id="group">
  <identifyingAttribute name="objectClass" value="groupOfNames"/>
 </object>

 <object id="member">
  <identifyingAttribute name="objectClass" value="eduMember" />
 </object>

and the ldap group

 dn: cn=unimore:domains:unimore:test,ou=unimoregroups,dc=unimore,dc=it
 objectClass: eduMember
 objectClass: groupOfNames
 objectClass: top

the provisioning engine will throw a "more than one schema entity
found" exception because it does not know if cn=unimore... is a
"group" or "member" since the objectClass of the cn=unimore... ldap
entry matches both <identifyingAttribute/> configuration elements.

I just added more text to the <identifyingAttribute/> documentation on
the real-time provisioning wiki page.

See

 Configure PSP : Identifying Attribute

on

 https://spaces.internet2.edu/display/Grouper/Grouper+Real-Time+Provisioning

I hope this helps,
TomZ