Grouper Users - Open Discussion List

[Dominique Petitpierre <>]

Hello,

Thanks for your explanation:

On 06/04/2013 07:08 PM, David Langenberg wrote:

> GroupExactAttribute filter only works on attributes.  Types are a
> different structure.  This is why that filter doesn't work.

The attribute in question, "LDAPFilter", occurs in the Grouper table
"GROUPER_ATTRIBUTES" and the view "GROUPER_ATTRIBUTES_V", and is of
type "attribute" in "GROUPER_FIELDS" which led me to think it was also
considered as an attribute for the purpose of the sourceAttributeID of
resolver:AttributeDefinition (it is) and grouper:GroupExactAttribute
filter (it isn't).

>  You get the
> type back from the DataConnector because it does wrap the Types up as a
> different attribute structure (Shib attribute).

- Would it be a problem to simply extend the scope of
  grouper:GroupExactAttribute to include the same set of identifiers
  as resolver:AttributeDefinition's sourceAttributeID?

> At present it seems
> there is no way to filter on GroupType.  I've created GRP-910 to address
> this.

Indeed, filtering on Type names (in addition to field values) could be
useful as well: in my example it would allow to filter on the value of
the Type name "LDAPSync" which was what I really wanted to do
initially.  To be complete, there should also be the possibility to
extract the name of the Type as a value of a Shibboleth attribute.

>  Changing from a type to a real attribute would be the best
> work-around I can think of.

OK.

Regards,
Dominique

--
Mr Dominique Petitpierre, user=Dominique.Petitpierre domain=unige.ch
IT Division, University of Geneva, Switzerland