grouper-users - [grouper-users] One Last Hurdle using the PSP to provision both AD and LDAP
Subject: Grouper Users - Open Discussion List
List archive
- From: "Bryan E. Wooten" <>
- To: "" <>
- Subject: [grouper-users] One Last Hurdle using the PSP to provision both AD and LDAP
- Date: Tue, 23 Jul 2013 15:25:23 +0000
- Accept-language: en-US
I can now provision Grouper stems and groups to both AD and LDAP. But I can’t add members to the groups. This the error: 2013-07-23 08:53:07,263: [main] DEBUG LdapSpmlTarget.execute(595) - - Target 'openDJ' - Search will return attributes '[objectclass, objectClass]' 2013-07-23 08:53:07,265: [main] DEBUG LdapSpmlTarget.execute(596) - - Target 'openDJ' - Searching 'SearchRequestWithQueryClauseNamespaces[query=Query[hasReference=HasReference[toPsoID=PSOIdentifier[id='unid=u0000859,ou=people,o=utah.edu',targetID=openDJ,containerID=<null>],typeOfReference=member],basePsoID=PSOIdentifier[id='cn=group9,ou=uofu,OU=grouper,DC=testad,DC=utah,DC=edu',targetID=openDJ,containerID=<null>],scope=pso,targetID=openDJ],returnData=identifier,maxSelect=0,requestID=2013/07/23-08:53:07.252]' 2013-07-23 08:53:07,272: [main] DEBUG AbstractLdap.search(193) - - Search with the following parameters: 2013-07-23 08:53:07,275: [main] DEBUG AbstractLdap.search(194) - - dn = cn=group9,ou=uofu,OU=grouper,DC=testad,DC=utah,DC=edu Even though Grouper knows it trying to provision LDAP it is using the “groupsBaseDN” for AD. For all psp*.xml I use the value from the ldap.properties like this: baseDn="${edu.internet2.middleware.psp.groupsBaseDn}" when referring to the
AD target. For my LDAP target I hard code like this: baseDN=”ou=grouper,o=Utah.edu”. This is working fine for creating stems and groups, but now I have run into this is when trying to add members. This piece of XML is the first clue I see: <spmlsearch:query targetID='openDJ' scope='pso'> <spmlref:hasReference typeOfReference='member'> <spmlref:toPsoID ID='unid=u0000859,ou=people,o=utah.edu' targetID='openDJ'/> </spmlref:hasReference> <spmlsearch:basePsoID ID='cn=group9,ou=uofu,OU=grouper,DC=testad,DC=utah,DC=edu' targetID='openDJ'/> </spmlsearch:query> </spmlsearch:SearchRequest> For some reason the basePsoID is pulling the wrong baseDN. I have poured over the psp xml files and cannot find where I am using the wrong baseDN. Can someone tell me which psp xml element is being mapped to basePsoID? Thanks, Bryan |
- [grouper-users] One Last Hurdle using the PSP to provision both AD and LDAP, Bryan E. Wooten, 07/23/2013
Archive powered by MHonArc 2.6.16.