Grouper Users - Open Discussion List

["Bryan E. Wooten" <>]

Ok, I have made changes to grouper/grouper.apiBinary-2.1.2/conf/grouper.properties to enable wheel groups.

I am now trying set up a connection to a subject source (LDAP)(https://spaces.internet2.edu/display/Grouper/Grouper+book+-+Connecting+to+a+subject+source),

so I need to modify the sources.xml file.  But which sources.xml?

[root@idm-6 grouper]# find ./ -name sources.xml

./grouper.ws-2.1.2/grouper-ws/build/dist/grouper-ws/WEB-INF/classes/sources.xml

./grouper.ui-2.1.2/build/grouper/WEB-INF/classes/sources.xml

./grouper.ui-2.1.2/dist/grouper/WEB-INF/classes/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-openldap-multiple/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-openldap/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-tivoli/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-active-directory/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-openldap-memberof-overlay/sources.xml

./grouper.psp-2.1.2/conf/psp-example-ldap-to-grouper/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-ldap/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-openldap-multiple/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-openldap/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-tivoli/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-active-directory/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-openldap-memberof-overlay/sources.xml

./grouper.apiBinary-2.1.2/conf/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-ldap-to-grouper/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-ldap/sources.xml

[root@idm-6 grouper]#

Thanks for any help,

-Bryan

On Nov 30, 2012, at 11:06 AM, Chris Hyzer wrote:

First question, I can login into the UI using the Grouper System account, but I don't like the password I chose at install time. How can I change it?

Should be in tomcat conf dir, tomcat-users.xml

I want to add "wheel group" members (subjects?) that have Grouper System privileges. How do I do that?

Does your grouper.properties have a wheel group enabled?  First thing is to do that.

Then you need to make sure your subjects are resolvable, either add them via GSH or SQL to the built in JDBC source, or add another source.

Then add those subjects to the group configured in grouper.properties.  You can do this via UI or GSH or client or WS

How do I stop and start the Grouper daemons? And the HSQL DB?

For daemons, you need to kill the process which is gsh -loader.  For starting, see the output from your installer script.  Generally you just find the gsh command, and run that: gsh -loader   for Linux, you could do this: nohup gsh -loader &

My end goal is to be able to manage AD groups using Grouper, what is the next step I should take?  

Should I load AD group information into Grouper or should I be creating groups in Grouper and then

use PSP to push the group information out to AD?

Well, do you want the system of record to be in Grouper or AD?  Are all subjects that go into groups in AD available in Grouper?  You can do the sync either way or both.  Maybe you want to mark groups to go to AD with an attribute, and you can configure which groups come back in the PSP or loader config (depending on which one you use)

Thanks,
Chris