Subject: Grouper Users - Open Discussion List
- From: Gagné Sébastien <>
- To: "Chris Hyzer" <>, "Rahul Doshi" <>, <>
- Subject: RE: [grouper-users] RE: Grouper ldap loader
- Date: Mon, 30 Jul 2012 09:15:03 -0400
We had a similar problem (it’s me in the link) : when creating “somestem:admins” it tries to add the group member “someotherstem:admins” but if it doesn’t exist in Grouper it won’t be added because it doesn’t find it. We had to add a “create missing groups” feature to our “translate AD CN in Group’s member to Grouper Group IDs”
You also have to be careful with what you are searching (Ids or Identifiers), because in source g:gsa (group adapter) Group ID are the generated UUIDs (e.g. 30bb5405f55942129948b4ee924331ea) while Group identifier are, I believe, the group name (e.g. somestem:admins)
I haven’t tried the loader ldap with a flat structure, so there might be a problem translating “member=cn=someotherstem:admins, ou=group, dc= example, dc = org” to the proper group id “baseStem:someotherstem:admins”
Actually, is this an LDAP_GROUP_LIST job, and is cn=someotherstem:admins, ou=group, dc= example, dc = org one of the groups that is returns from the ldap filter (as well as a member of a group). If so, then with the link below, you can do what you want to do. If that member which is a group is not managed by the loader, so we can do this with a tweak to grouper or an EL tweak. Let me know
I hadn’t really considered that case when creating the loader, but I think it can be done fairly easily with some EL and a java class. It is very similar to this email, except that the group will be created perhaps in EL…
Want me to try to send you an example?
I am trying to use grouper loader to load all the existing groups from our ldap environment. It seems to load the groups fine except that it is ignoring the nested group membership. For hypothetical group below if I run the loader job, I only see somstem:admins group created in grouper with member xyz. What I would have expected to see is two groups somestem:admins and someotherstem:admins created in grouper and someotherstem:admins also be the member of some stem:admins. Is there something that I am missing in my configuration?
cn=somestem:admins, ou=group, dc=example, dc=org
member=cn=someotherstem:admins, ou=group, dc= example, dc = org
- RE: [grouper-users] RE: Grouper ldap loader, Gagné Sébastien, 07/30/2012
Archive powered by MHonArc 2.6.16.