Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Weird behavior with LDAP_GROUPS_FROM_ATTRIBUTES

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Weird behavior with LDAP_GROUPS_FROM_ATTRIBUTES


Chronological Thread 
  • From: Gagné Sébastien <>
  • To: "Bryan E. Wooten" <>, <>
  • Subject: RE: [grouper-users] Weird behavior with LDAP_GROUPS_FROM_ATTRIBUTES
  • Date: Wed, 17 Apr 2013 15:52:43 -0400
  • Authentication-results: sfpop-ironport04.merit.edu; dkim=neutral (message not signed) header.i=none

Did you define your paging configuration in ldap.properties ? AD has a maximum of 1000 results returned, that could be the problem for sn=jones

 

As for the loader I’m not sure

 

De : [mailto:] De la part de Bryan E. Wooten
Envoyé : 17 avril 2013 15:28
À :
Objet : [grouper-users] Weird behavior with LDAP_GROUPS_FROM_ATTRIBUTES

 

I am trying to create a group where the search filter is (memberof=cn=currentstudents). When I use that filter against AD I get 46k results. However when the loader runs I only get 3 results. There was a time earlier today when I only got one result.

 

I changed the configuration so that the filter is (sn=jones). I get back 1000 results. The AD has 1007 entries where sn=jones.

 

Does anyone have any I ideas what is going on? Below is my Attribute assignments for the group.

 

Thanks,

 

Bryan

 

Attribute assignments

Owner group     Attribute name                Enabled?            Assignment values         Attribute definition        Assignment UUID

                groupsFromAttributesLdapGroup            Grouper loader LDAP     enabled                               grouperLoaderLdapDef                10635...

Metadata on assignment                             Grouper loader LDAP group attribute name        enabled                  memberof                grouperLoaderLdapValueDef     0b9ea...

Metadata on assignment                             Grouper loader LDAP quartz cron             enabled                  0 * * * * ?                grouperLoaderLdapValueDef     33c16...

Metadata on assignment                             Grouper loader LDAP type           enabled                  LDAP_GROUPS_FROM_ATTRIBUTES      grouperLoaderLdapValueDef     35d89...

Metadata on assignment                             Grouper loader LDAP subject _expression_              enabled                  ${subjectAttributes['cn']}             grouperLoaderLdapValueDef     4d525...

Metadata on assignment                             Grouper loader LDAP server ID  enabled                  personLdap                grouperLoaderLdapValueDef     69096...

Metadata on assignment                             Grouper loader LDAP group name _expression_    enabled                  groups:currentStudent grouperLoaderLdapValueDef     9243e...

Metadata on assignment                             Grouper loader LDAP subject ID type     enabled                  subjectIdentifier                grouperLoaderLdapValueDef     92bb6...

Metadata on assignment                             Grouper loader LDAP extra attributes    enabled                  cn                grouperLoaderLdapValueDef     9a5a6...

Metadata on assignment                             Grouper loader LDAP filter          enabled                  (memberof=cn=currentstudents,ou=academic,ou=security groups,dc=testad,dc=utah,dc=edu)                grouperLoaderLdapValueDef     a5522...

Metadata on assignment                             Grouper loader LDAP search base DN     enabled                  ou=people,dc=testad,dc=utah,dc=edu grouperLoaderLdapValueDef     ba12d...

Metadata on assignment                             Grouper loader LDAP source ID enabled                  ldap                grouperLoaderLdapValueDef     c9756...




Archive powered by MHonArc 2.6.16.

Top of Page