Grouper Users - Open Discussion List

[Scott Koranda <>]

Hi,

> Yes, here we copy the psp configuration in the grouper api
> conf folder before doing any configuration since the PSP
> examples will overwrite the sources.xml file.
> 
> API, UI, WS and PSP will use the same sources.xml file with
> the ldap.property file. All the initial parameters (e.g.
> PROVIDER_URL, SECURITY_AUTHENTICATION, SECURITY_PRINCIPAL)
> will be in ldap.properties file. Grouper can still support
> the "old" parameters in the sources.xml, but I find it
> cleaner in the file (since you already need it)

Excellent. Thanks much.

> 
> One important thing : you should use the <id>ldap</id>
> instead of ligo. If you need/want to use something other
> than ldap you will have to change it in multiple location in
> multiple files, see :
> https://spaces.internet2.edu/display/Grouper/Grouper+Provisioning#GrouperProvisioning-ConfigureLDAPSubjectSourceIDOtherThan%22ldap%22

Aha. Good to know.

Cheers,

Scott

> 
> 
> -----Message d'origine----- De :
> 
> [mailto:]
>  De la part de
> Scott Koranda Envoyé : 30 mars 2012 11:27 À : grouper-users
> Objet : [grouper-users] Grouper PSP and sources.xml
> 
> Hi,
> 
> I deployed Grouper 2.1.0 API, UI, and WS following my usual
> deployment instructions. As part of that I edited
> sources.xml to find subject in my LDAP:
> 
>   <source
>   
> adapterClass="edu.internet2.middleware.grouper.subj.GrouperJndiSourceAdapter">
>   <id>ligo</id> <name>LIGO VO Members</name>
>   <type>person</type> <init-param>
>   <param-name>INITIAL_CONTEXT_FACTORY</param-name>
>   <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value>
>   </init-param> <init-param>
>   <param-name>PROVIDER_URL</param-name>
>   <param-value>ldaps://some.server.edu:636</param-value>
>   </init-param> <init-param>
>   <param-name>SECURITY_AUTHENTICATION</param-name>
>   <param-value>simple</param-value> </init-param>
>   <init-param> <param-name>SECURITY_PRINCIPAL</param-name>
>   <param-value>uid=grouper,ou=system,dc=ligo,dc=org</param-value>
>   </init-param> <init-param>
>   <param-name>SECURITY_CREDENTIALS</param-name>
>   <param-value>XXXXXXXX</param-value> </init-param>
>   <init-param>
>   <param-name>SubjectID_formatToLowerCase</param-name>
>   <param-value>false</param-value> </init-param>
> 
> <snip>
> 
> The instructions and example for the PSP at
> 
> https://spaces.internet2.edu/display/Grouper/Grouper+Provisioning
> 
> uses a different adapterClass and 
> 
> <init-param> <param-name>ldapProperties_file</param-name>
> <param-value>ldap.properties</param-value> </init-param>
> 
> along with the ldap.properties file.
> 
> Am I supposed to replace the sources.xml file I use for the
> API, UI, and WS with the one I configure for the PSP so that
> they all use the same sources.xml or is the PSP supposed to
> have a unique sources.xml file?
> 
> Does the PSP need to use ldap.properties?
> 
> Thanks,
> 
> Scott
> 
> 
> 
> 
>