Grouper Users - Open Discussion List

["Klug, Lawrence" <>]

Tom,

Okay, I tested it in this way and it worked fine.    This provisioning 
process would be a part of bulk sync, right?

(BTW, I'm using 2.0, so the command is ldappcng - we are hoping to upgrade 
when 2.1.1 comes out.)

Thanks,

Lawrence

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Tom Zeller
Sent: Friday, June 22, 2012 1:33 PM
To: Klug, Lawrence
Cc: 

Subject: Re: [grouper-users] LDAPPCNG - isMemberOf attribute

Turn up logging to debug or trace in grouper/conf/log4j.properties :

 # Provisioning : PSP (version 2.1+)
 log4j.logger.edu.internet2.middleware.psp = TRACE

 # Provisioning : vt-ldap
 log4j.logger.edu.vt.middleware.ldap = DEBUG

 # Provisioning : Grouper plugin to Shibboleth attribute resolver  
log4j.logger.edu.internet2.middleware.grouper.shibboleth = TRACE

then try to calc a person who should have isMemberOf provisioned :

 bin/gsh.sh -psp -calc <subject id of member who should have isMemberOf>

and take a look at the log output in logs/grouper_error.log, which if you can 
post somewhere, I will read.

TomZ

On Fri, Jun 22, 2012 at 1:30 PM, Klug, Lawrence 
<>
 wrote:
> We're running LDAPCNG v2.0 and for some reason the isMemberOf 
> attribute is no longer being populated into Person records.   What 
> should I be looking for configuration-wise?  We want to use isMemberOf  
> Shib header attribute for authorization.
>
>
>
> Thanks,
>
>
>
> Lawrence