Skip to Content.
Sympa Menu

grouper-users - [grouper-users] Groups by Attribute Value?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Groups by Attribute Value?

Chronological Thread 
  • From: Joshua Riffle <>
  • To:
  • Subject: [grouper-users] Groups by Attribute Value?
  • Date: Wed, 13 Aug 2014 13:42:18 -0700

I am in the midst of a project to hammer some sense out of an OpenLDAP directory structure and one of the topics of interest for our use-case is:
Why can't we just identify user groupings by a value in one of their person attributes?

For example a person entry in our LDAP directory has an attribute with a value of "edu:person:affil:staff" we could say they are in the "Staff" group via the ldap filter (objectclass=person)(attribute=edu:person:affil:staff). A person would be added to this group by applying this value to their person entry or removed from this group by removing this value from their person entry. This allows us to avoid maintaining a group object named "edu:person:affil:staff" and does not require us to worry about referential integrity between "member" and "memberOf" attributes. One down-side is that it eliminates our ability to meaningfully nest these groupings of attribute but that may not be an issue for our use-case.

That all being said, I am struggling to determine whether or not Grouper is capable of understanding "Groups" by Groupings of persons with a specific attribute value or if it is architected to only understand groups as objects with a list of members?

Joshua Riffle
Software Engineer
Azusa Pacific University

Archive powered by MHonArc 2.6.16.

Top of Page