Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] PSP - provisioning folder as an LDAP OU ?

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] PSP - provisioning folder as an LDAP OU ?


Chronological Thread 
  • From: Gagné Sébastien <>
  • To: "SIAD" <>, <>
  • Subject: RE: [grouper-users] PSP - provisioning folder as an LDAP OU ?
  • Date: Fri, 27 Sep 2013 10:05:32 -0400

Yes, when doing flat provisionning Grouper adds all the folder hierachy to the group’s name (e.g. test:dept1:Group1). This is because, in Grouper, groups are unique only within a folder (e.g. you can have a group named “Group1” in both folders “test1” and “test2”). Provisioning flat without folder name in the resulting group would cause problems…

 

If you only have one folder in Grouper that contains all your groups there is a parameter that will remove this base folder :

 

ldap.properties

 

# The base Grouper stem to be provisioned.

edu.internet2.middleware.psp.baseStem=test

 

If you have multiple folders in Grouper, you need to ensure uniqueness with a Hook to prevent conflicts. Then you have some psp magic to work to prevent Grouper from adding the group’s folders in the group’s name. This is our case here, if you are in that situation I could help you further with the hook and “psp magic” J

 

Hope that helps

 

 

De : SIAD [mailto:]
Envoyé : 27 septembre 2013 09:12
À : Gagné Sébastien;
Objet : Re: [grouper-users] PSP - provisioning folder as an LDAP OU ?

 

Thanks for your answer.
But i already set edu.internet2.middleware.psp.structure=flat in my ldap.properties.
If i create a group "test" under a folder "test", this is the result in my LDAP :



And i don't want "ou=test".

Am i missing something ?

Thanks,
Yoann.

Le 26/09/2013 14:49, Gagné Sébastien a écrit :

Hi,
There is also a configuration for "bushy" or "flat" provisioning you must define. This will change the way the DN is generated (with or without folder names). You are right that you can remove the stem PSO if your target folder already exists in your LDAP. You could probably remove some attribute definitions in psp-resolver too, but you have to be careful about dependencies with groups.
 
ldap.propeties
 
# The ldap DN structure may be either flat or bushy.
# In a flat structure all groups are provisioned under a single base DN (container ID).
# A flat group's ldap RDN is its Grouper name or displayName.
edu.internet2.middleware.psp.structure=flat
 
-----Message d'origine-----
De :  [] De la part de SIAD
Envoyé : 26 septembre 2013 05:33
À : 
Objet : [grouper-users] PSP - provisioning folder as an LDAP OU ?
 
Hi everyone,
 
i have a little question about provisioning folder with the psp. I use a flat configuration so provisioning a grouper folder as an ldap OU is useless for us.
for now, in my psp.xml, i just delete the stem PSO and it's work. But i wonder if this is the best method ?
 
Thanks for your help :-)
 
Yoann.
 
 

 




Archive powered by MHonArc 2.6.16.

Top of Page