Grouper Users - Open Discussion List

[Francesco Malvezzi <>]

Il 01/06/2012 04:11, Tom Zeller ha scritto:
> Yes, your configuration (sent off-list) is advanced, you are
> provisioning groups from two stems to multiple targets with two ldap
> representations, simple and samba, based on the stem. Good work !
> 
> I will probably have more comments later, but for now ...
> 
> If you want to provision a memberUid attribute when a member is added
> or removed from a group, you will need to add an <attribute
> name="memberUid" ... /> element to the group membership provisioned
> service objects :
> 
> <!-- Provision a group membership triggered by the grouper change log. -->
> <pso id="groupMembership1">
>  <attribute
>     name="memberUid"
>     ref="changeLogMembershipSubjectId" />
> 

very clear: I missed it,

[...]
> 
> Take a look at the "changeLogMembershipLdapSubjectId" attribute
> definition. You will want to return the subject ids of members if the
> group name of a membership change log entry starts with
> "unimore:domains". I think the attribute definition below will work,
> but I did not try it. I think lastIndexOf is the emca script
> equivalent of startsWith.
> 
>   <!-- The value of the "changeLogMembershipSambaSubjectId" attribute
> is the subject identifier of the member
>     of a membership change log entry where the group name starts with
> "unimore:domains". -->
>   <resolver:AttributeDefinition
>     id="changeLogMembershipSambaSubjectId"
>     xsi:type="ad:Script">
>     <resolver:Dependency ref="AddMembershipChangeLogDataConnector" />
>     <resolver:Dependency ref="DeleteMembershipChangeLogDataConnector" />
>     <ad:Script><![CDATA[
>         // Import Shibboleth attribute provider.
>         
> importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);
> 
>         // Create the attribute to be returned.
>         changeLogMembershipSambaSubjectId = new
> BasicAttribute("changeLogMembershipSambaSubjectId");
> 
>         // Return 'subjectId' attribute values if the 'groupName'
> starts with 'unimore:domains'.
>         if (typeof groupName != "undefined" && groupName != null ){
>             if (groupName.getValues().get(0).lastIndexOf("unimore:domains",
> 0) >= 0) {
>                 if (typeof subjectId != "undefined" && subjectId != null ){
> 
> changeLogMembershipSambaSubjectId.getValues().add(subjectId.getValues().get(0));
>                 }
>             }
>         }
>     ]]></ad:Script>
>   </resolver:AttributeDefinition>

[...]
> 
> Hope this helps, let us know.
> 
[...]

ecma script is correct: I didn't check what it resolved because it looks
it is never called.

With a grep changeLogMembershipSambaSubjectId grouper_error.log
grouper_event.log I only have a single line:
../logs/grouper_error.log:2012-06-04 09:35:02,246:
[DefaultQuartzScheduler_Worker-4] DEBUG Psp.execute(970) -  - PSP 'psp'
- Calc
CalcRequest[id=change_log_sequence_number:1675,requestID=2012/06/04-09:35:02.236,returnData=everything]
Resolving attributes '[stemDn, stemDnAlternateChangeLog,
stemObjectclass, stemOu, stemDescription, simpleGroupDn,
simpleGroupDnAlternate, simpleGroupDnAlternateChangeLog,
simpleGroupObjectclass, cn, groupDescription, hasMember,
groupIsMemberOf, membersLdap, membersGsa, sambaGroupDn,
sambaGroupDnAlternate, sambaGroupDnAlternateChangeLog,
sambaGroupObjectclass, gidNumber, sambaGroupType, sambaSID, memberUid,
memberDn1, memberObjectclass, memberIsMemberOf,
changeLogMembershipGroupDn, changeLogMembershipSubjectName,
changeLogMembershipSambaSubjectId, changeLogMembershipLdapSubjectId,
changeLogMembershipGroupSubjectName, changeLogMembershipMemberDn,
changeLogMembershipGroupName, changeLogMembershipGroupMemberDn, memberDn2]'.

But I haven't yet read
https://spaces.internet2.edu/display/Grouper/Grouper+Provisioning#GrouperProvisioning-RealTimeChangelogProvisioningDetailsProbablyMoreThanYouEverWanttoKnow
so please give me time to do that.

ciao,

Francesco