Grouper Users - Open Discussion List

[Andrea Biancini <>]

David,

thanks for your answer!

Actually I have tried to do that, but I must have put too much jars in the lib, the webapplication was compiling but it was not starting on my tomcat.

I will try it again, probably I did something wrong.

I appreciate this is not the usual way of integrating Grouper, in fact I haven't find too much documentation about it.

I tried to LDAP way, but I wasnt satisfied. I will look in depth the RDBMS way...
I just need to become familiar with the datamodel of grouper DB.

Thanks,

cheers,

Andrea

On Thu, Jan 30, 2014 at 4:19 PM, David Langenberg <> wrote:

HI Andrea,

Yes, you will have to put the grouper jars and dependencies into the shibboleth IdP.  Generally this is done by putting them into $SHIB_DISTRIBUTION/lib so when you run the install script they go into /opt/shibboleth-idp/lib.  I have given myself the task of writing a step-by-step howto https://bugs.internet2.edu/jira/browse/GRP-952.  However, I should note, most people do not integrate with grouper in this fashion.  Generally folks will either push group membership information to LDAP/AD where Shibboleth will grab it along with the other attributes it grabs (https://spaces.internet2.edu/display/Grouper/Exposing+Groups+Through+Shibboleth).  Alternately, they will use the RDBMS Connector and query the grouper database via it's various views: https://spaces.internet2.edu/display/Grouper/Grouper+SQL+interface

Dave

On Wed, Jan 29, 2014 at 8:53 AM, Emily Eisbruch <> wrote:

Andrea,

I am forwarding your email to the Grouper-users list, as this is the best way to get Grouper support.

Thank you,

Emily

From: Andrea Biancini <>
Date: Wednesday, January 29, 2014 8:55 AM
To: Emily Eisbruch <>
Subject: Grouper integration with Shibboleth IdP

Emily,

sorry for my email, I'm writing because I'm trying to configure an IdP to release Grouper attributes but I'm having problems.

I have seen your name as a contributor to the page:
https://spaces.internet2.edu/display/Grouper/Grouper+Shibboleth+Integration

which I am using as a reference.

The problem I'm having is about how I can integrate grouper-shib inside a Shibboleth IdP.

If I understand correctly, what I see in that page is regarding how I have to configure the attribute-resolver.xml page. The problem, however, is that I think I have to provied grouper jars to the IdP webapp.

How can I do that?
Is there a place where I can find a step-by-step guide about how to install an IdP providing Grouper attributes from scratch?

Thanks for your answer!
Regards,

Andrea

--

Andrea Biancini

Consortium GARR
Edificio U2 - Piazza della Scienza 3
I-20126 Milano - Italia
tel. +39 02 6448 2507
e-mail:
skype contact: biancinian

--
David Langenberg

Identity & Access Management

The University of Chicago

--

Andrea Biancini

Consortium GARR
Edificio U2 - Piazza della Scienza 3
I-20126 Milano - Italia
tel. +39 02 6448 2507
e-mail:
skype contact: biancinian