grouper-users - RE: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes
Subject: Grouper Users - Open Discussion List
List archive
RE: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes
Chronological Thread
- From: Chris Hyzer <>
- To: Scott Koranda <>
- Cc: grouper-users <>
- Subject: RE: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes
- Date: Thu, 8 Aug 2013 20:57:09 +0000
- Accept-language: en-US
I committed this in the 2.1 branch. Code looks good to me. :)
https://bugs.internet2.edu/jira/browse/GRP-925
I also made an update to the wiki docs about this config option.
Thanks,
Chris
-----Original Message-----
From: Scott Koranda
[mailto:]
Sent: Thursday, August 08, 2013 3:34 PM
To: Chris Hyzer
Cc: grouper-users
Subject: Re: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership
carried in two attributes
Hi Chris,
On Sat, Aug 3, 2013 at 9:34 PM, Chris Hyzer
<>
wrote:
> The loader doesn't really do that. If there arent too many attributes, can
> you create two loader jobs, one for isMemberOf and one for isManagerOf and
> then create a group that has both of those groups in it for each attribute?
> :) Otherwise we need to make some tweaks to the LDAP loader...
I have made "some tweaks" to the LDAP loader code and sent them to you
privately.
In short the (simple) changes allow the
grouperLoaderLdapGroupAttribute value to be multiple attribute names
separated by a ",".
I have tested the new code using the 2.1.4 code base and GSH commands
to construct the loader job. The liteUI was able to read the loader
job and display the attribute value so it appears on face value that
the liteUI is happy (I assume it is just treating the value as an
opaque string that gets passed to the loader job code).
Please consider committing the code tweaks (after any edits you see
fit to make of course) and making them part of a released version of
Grouper.
Thanks,
Scott
>
> Thanks,
> Chris
>
> -----Original Message-----
> From:
>
>
> [mailto:]
> On Behalf Of Scott Koranda
> Sent: Saturday, August 03, 2013 6:14 PM
> To: grouper-users
> Subject: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership
> carried in two attributes
>
> Hello,
>
> I am using the loader to load groups from an LDAP directory using
> grouperLoaderLdapType 'LDAP_GROUPS_FROM_ATTRIBUTES'.
>
> Unfortunately there is not one but two multi-valued attributes that
> "carry" the group membership (say isMemberOf and isManagerOf).
>
> What is the best strategy to define a loader job(s) that will create
> groups and add memberships when a subject has either attribute?
>
> Is it possible to use a grouperLoaderLdapAttributeFilterExpression to
> transform or cast one attribute to another?
>
> Thanks,
>
> Scott
- [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes, Scott Koranda, 08/03/2013
- RE: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes, Chris Hyzer, 08/03/2013
- Re: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes, Scott Koranda, 08/08/2013
- RE: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes, Chris Hyzer, 08/08/2013
- Re: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes, Scott Koranda, 08/08/2013
- RE: [grouper-users] LDAP_GROUPS_FROM_ATTRIBUTES where membership carried in two attributes, Chris Hyzer, 08/03/2013
Archive powered by MHonArc 2.6.16.