Grouper Users - Open Discussion List

[Chris Hyzer <>]

I think that is the best way to go... if we need to tweak the loader to not run the change log or something, that should be doable I would think...

---

From: [] on behalf of David Langenberg []
Sent: Wednesday, October 02, 2013 4:15 PM
To: Bryan E. Wooten
Cc:
Subject: Re: [grouper-users] Syncing Groups between 2 Groupers

Sebastien Gagne was attempting this with 2 separate grouper-loader daemons.  Did you ever get that working Sebastien?

Dave

On Wed, Oct 2, 2013 at 2:07 PM, Bryan E. Wooten <> wrote:

Since I just can’t seem to get the PSP to provision both AD and LDAP I think this may be a workable solution.

 

Here is my plan, let me know what you think.

 

1.       Master Grouper

a.       This has the Loader and Web UI

b.      Pushes stems, groups and members to Slave Grouper

c.       PSP provisions to Active Directory

d.      LDAP Subject Source

e.      Grouper Loader loads groups from Active Directory

2.       Slave Grouper

a.       Has the Web Service installed

b.      Has the Loader

c.       LDAP Subject source

d.      PSP Provisions to LDAP

 

Users only manage Groups on the Master Grouper using the WEB UI. The Slave Grouper’s sole purpose in life is to provision Groups in LDAP, otherwise it is a mirror of the Master Grouper.

 

Thanks,

 

Bryan

--
David Langenberg

Identity & Access Management

The University of Chicago