Grouper Users - Open Discussion List

[David Langenberg <>]

Hi,

Well, technically this is possible, but you'll have play with it a lot in the psp-resolver.xml file.  You're basically going to need to create a few Scripted Attributes[1] that will mangle the CN from both the PSO (coming from grouper) and LDAP to make it meet your requirements.  Just a bit of caution though, this will be a long trial and error process.

Dave

[1] https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition

On Tue, Jan 6, 2015 at 8:59 AM, Wallaert-Taquet Brigitte <> wrote:

Hello,

I wish Happy New Year for all !

We wish add information to folder to select thoses which participate to the construct of the cn of the group for the publication in ldap.

For example, we have this hierachy :

université --> services --> services communs --> CRI -->  group responsables : cn=CRI:responsables

université --> composantes --> ufr physique --> département laser --> group responsables : cn=physique:laser:responsable

So, we constitute the cn differently according to the context, it's why we wish recorder information on the folder to indicate if it should participate to the cn or not. Because we plan to use a hook or somethingp like that to constitute automatically the cn from theses informations in the folder hierarchy.

I hope it's understandable ?

Do you think that it's possible to do that with grouper 2.2 ?

Perhaps I can divert the alternate id to do that ?

Thanks for your help !

Cordialement

-- 
Brigitte Wallaert-Taquet
Ingénieure d'études
Université Lille1
Sciences et Technologies
Tél : 03.20.33.71.65

--

David Langenberg

Identity & Access Management

The University of Chicago