Grouper Users - Open Discussion List

[Gagné Sébastien <>]

Yes, here we copy the psp configuration in the grouper api conf folder before 
doing any configuration since the PSP examples will overwrite the sources.xml 
file.

API, UI, WS and PSP will use the same sources.xml file with the ldap.property 
file. All the initial parameters (e.g. PROVIDER_URL, SECURITY_AUTHENTICATION, 
SECURITY_PRINCIPAL) will be in ldap.properties file. Grouper can still 
support the "old" parameters in the sources.xml, but I find it cleaner in the 
file (since you already need it)

One important thing : you should use the <id>ldap</id> instead of ligo. If 
you need/want to use something other than ldap you will have to change it in 
multiple location in multiple files, see : 
https://spaces.internet2.edu/display/Grouper/Grouper+Provisioning#GrouperProvisioning-ConfigureLDAPSubjectSourceIDOtherThan%22ldap%22


-----Message d'origine-----
De : 

 
[mailto:]
 De la part de Scott Koranda
Envoyé : 30 mars 2012 11:27
À : grouper-users
Objet : [grouper-users] Grouper PSP and sources.xml

Hi,

I deployed Grouper 2.1.0 API, UI, and WS following my usual deployment 
instructions. As part of that I edited sources.xml to find subject in my LDAP:

  <source 
adapterClass="edu.internet2.middleware.grouper.subj.GrouperJndiSourceAdapter">
    <id>ligo</id>
    <name>LIGO VO Members</name>
    <type>person</type>
    <init-param>
      <param-name>INITIAL_CONTEXT_FACTORY</param-name>
      <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value>
    </init-param>
    <init-param>
      <param-name>PROVIDER_URL</param-name>
      <param-value>ldaps://some.server.edu:636</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_AUTHENTICATION</param-name>
      <param-value>simple</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_PRINCIPAL</param-name>
      <param-value>uid=grouper,ou=system,dc=ligo,dc=org</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_CREDENTIALS</param-name>
      <param-value>XXXXXXXX</param-value>
    </init-param>
    <init-param>
      <param-name>SubjectID_formatToLowerCase</param-name>
      <param-value>false</param-value>
     </init-param>

<snip>

The instructions and example for the PSP at

https://spaces.internet2.edu/display/Grouper/Grouper+Provisioning

uses a different adapterClass and 

<init-param>
      <param-name>ldapProperties_file</param-name>
      <param-value>ldap.properties</param-value>
</init-param>

along with the ldap.properties file.

Am I supposed to replace the sources.xml file I use for the API, UI, and WS 
with the one I configure for the PSP so that they all use the same 
sources.xml or is the PSP supposed to have a unique sources.xml file?

Does the PSP need to use ldap.properties?

Thanks,

Scott