Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Question about LDAP to Grouper provisioning

Please Wait...

grouper-users@internet2.edu

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Question about LDAP to Grouper provisioning


Chronological Thread 
  • From: Tom Zeller <tzeller@dragonacea.biz>
  • To: "Bryan E. Wooten" <bryan.wooten@utah.edu>
  • Cc: "grouper-users@internet2.edu" <grouper-users@internet2.edu>
  • Subject: Re: [grouper-users] Question about LDAP to Grouper provisioning
  • Date: Sat, 30 Mar 2013 14:27:49 -0500
  • Authentication-results: sfpop-ironport04.merit.edu; dkim=pass (signature verified) header.i=@dragonacea.biz

> Of course this assumes that the PSP can in fact both provision to and from
> AD. Is this true?

Bi-directional provisioning in a single configuration is something I
have not attempted, nor claim to support, but in theory the ordering
of the elements in psp.xml should allow you to do so.

> And last question. Provision from Grouper to AD is kicked off either at the
> gsh command prompt (loaderRunOneJob, gsh –psp –sync <id>) or using the
> Quartz timer in the Grouper loader. What command or setting kicks off
> ad-to-grouper provisioning? There is no change log to run against for AD
> changes.

Nothing shipped with the psp. Tailing an ldif audit log is old school,
not sure if AD has that.



Archive powered by MHonArc 2.6.16.

Top of Page