Grouper Users - Open Discussion List

[Gagné Sébastien <>]

To understand correctly you want to have a Grouper Group which the members 
are users and/or groups from the ldap ?

I'm not sure if "<type>person</type>" does anything

What I would check is that your LDAP groups have subject ID with this part 
(maybe CN in your case) :
<init-param>
      <param-name>SubjectID_AttributeType</param-name>
      <param-value>sAMAccountName</param-value>
    </init-param>


And that the searches have filters that can see groups, something like :

<param-name>filter</param-name>
            <param-value>
                
(&amp;(sAMAccountName=%TERM%)(|(objectclass=user)(objectclass=group)))
            </param-value>

If I'm not clear we can always talk in French if you prefer ;~)

-----Message d'origine-----
De : 

 
[mailto:]
 De la part de Gasperowicz Jérémy
Envoyé : 30 janvier 2013 10:30
À : Shilen Patel
Cc : 

Objet : Re: [grouper-users] LDAP groups in sources.xml

Hi,

I want to reference a group which exists in LDAP as a group in grouper 
without to sync with loader LDAP. In sources.xml, with <type>person</type>, a 
LDAP group is taken such a member, not a group with his own members, that's 
the problem. I thought <type>group</type> could solve this with a direct 
connection to ou=groups

Thanks

Le 30/01/2013 15:58, Shilen Patel a écrit :
> Hi,
>
> Are you trying to reference a group in Grouper that's sourced out of 
> LDAP instead of locally in Grouper's database?  I think you'll want to 
> sync the group from LDAP to Grouper using the Grouper loader or PSP.  
> If I'm misunderstanding, can you elaborate on your use case?
>
> Thanks!
>
> -- Shilen
>
> On 1/29/13 4:46 AM, "Gasperowicz Jérémy"
> <>
>   wrote:
>
>> Hi,
>>
>> I've tried to add a JNDI group resolver in order to add members from 
>> a group in the LDAP but doesn't work, i've the error : Cant find 
>> group by
>> uuid: 2IIGAC211
>> Is it possible to add members directly from LDAP group without 
>> retrieve this group in grouper, with a JNDI group resolver 
>> (<type>group</type>) and if it is, how ?
>>
>> Thanks a lot,
>>
>> Jérémy Gasperowicz