Grouper Users - Open Discussion List

[Tom Barton <>]

TomZ,

Dan might not know that the grouper instance he's using currently uses a
home-grown AD provisioner. His question probably needs to go to the
UChicago IdM team, to whom I'll forward this.

UChicago intends to switch its grouper provisioning over to psp after
upgrading to 2.1 this summer.

Tom

On 3/27/2012 4:35 PM, Tom Zeller wrote:
> Are you using the psp (formerly ldappcng) to provision groups from
> grouper to active directory ?
>
> If so, I can cook up a non-flattened example.
>
> TomZ
>
> On Tue, Mar 27, 2012 at 4:30 PM, Daniel Patrick Sullivan
> <>
>  wrote:
>> Hi, Grouper Users,
>>
>> I have a question about the structure of how groups can be written to
>> a Microsoft Active Directory domain using grouper.  I am trying to
>> create a group in grouper, and make other groups members of that group
>> (which I believe I have done correctly), however, when I write the
>> parent group to to Active Directory, it appears that the membership of
>> the child groups are being evaluated and flattened out into a single
>> group with members of all child groups defined in the parent.   I
>> would like the hierarchical structure defined in grouper to be
>> maintained in-tact in the target AD.  Is this possible?  Is the
>> flattening of the parent group in the target what I should expect to
>> see as normal behavior?  I have taken some screenshots of the behavior
>> that I described:
>>
>> https://webshare.uchicago.edu/users/dansully/Public/grouper_nesting_hierarchical_source.PNG
>> https://webshare.uchicago.edu/users/dansully/Public/grouper_nesting_flattened_target.PNG
>>
>> Thank-you so much for your input.
>>
>> Sincerely,
>>
>> Dan Sullivan