Grouper Users - Open Discussion List

[SIAD <>]

I understand, thanks for your help :-)
But , the fact that Grouper adds all the folder hierarchy to the group’s name it's not a problem for me.
The problem is : when i create a folder (just a folder, without a group in it) let's says : "test2", PSP create an Organizational Unit (a folder LDAP) in my LDAP.



Is there a way to avoid that ?

Sorry, i wasn't clear... :-\

Thanks again !

Yoann.

Le 27/09/2013 16:05, Gagné Sébastien a écrit :

Yes, when doing flat provisionning Grouper adds all the folder hierachy to the group’s name (e.g. test:dept1:Group1). This is because, in Grouper, groups are unique only within a folder (e.g. you can have a group named “Group1” in both folders “test1” and “test2”). Provisioning flat without folder name in the resulting group would cause problems…

 

If you only have one folder in Grouper that contains all your groups there is a parameter that will remove this base folder :

 

ldap.properties

 

# The base Grouper stem to be provisioned.

edu.internet2.middleware.psp.baseStem=test

 

If you have multiple folders in Grouper, you need to ensure uniqueness with a Hook to prevent conflicts. Then you have some psp magic to work to prevent Grouper from adding the group’s folders in the group’s name. This is our case here, if you are in that situation I could help you further with the hook and “psp magic” J

 

Hope that helps

 

 

De : SIAD []
Envoyé : 27 septembre 2013 09:12
À : Gagné Sébastien;
Objet : Re: [grouper-users] PSP - provisioning folder as an LDAP OU ?

 

Thanks for your answer.
But i already set edu.internet2.middleware.psp.structure=flat in my ldap.properties.
If i create a group "test" under a folder "test", this is the result in my LDAP :



And i don't want "ou=test".

Am i missing something ?

Thanks,
Yoann.

Le 26/09/2013 14:49, Gagné Sébastien a écrit :

Hi,

There is also a configuration for "bushy" or "flat" provisioning you must define. This will change the way the DN is generated (with or without folder names). You are right that you can remove the stem PSO if your target folder already exists in your LDAP. You could probably remove some attribute definitions in psp-resolver too, but you have to be careful about dependencies with groups.

ldap.propeties

# The ldap DN structure may be either flat or bushy.

# In a flat structure all groups are provisioned under a single base DN (container ID).

# A flat group's ldap RDN is its Grouper name or displayName.

edu.internet2.middleware.psp.structure=flat

-----Message d'origine-----

De :  [] De la part de SIAD

Envoyé : 26 septembre 2013 05:33

À : 

Objet : [grouper-users] PSP - provisioning folder as an LDAP OU ?

Hi everyone,

i have a little question about provisioning folder with the psp. I use a flat configuration so provisioning a grouper folder as an ldap OU is useless for us.

for now, in my psp.xml, i just delete the stem PSO and it's work. But i wonder if this is the best method ?

Thanks for your help :-)

Yoann.