Grouper Users - Open Discussion List

[David Langenberg <>]

You could create a root-folder called PSP and in there just put the groups you intend to go to LDAP.  So, for instance, you could put the SOR, includes, excludes in an applications:app folder.  Then in the PSP top folder you'd have PSP:applications:app:authorized which would be the final composite of the other groups under the applications:app folder.

Dave

On Thu, Jun 11, 2015 at 11:09 AM, <> wrote:

Hello!

We're working on a grouper proof-of-concept here at UMass Dartmouth.  One of
the issues we're currently stuck on is with composite groups and NOT
provisioning the sub groups associated with them to our LDAP (389).  For
instance, we would rather NOT have the "systemOfRecord" "includes", "excludes"
and "includes and systemOfRecords" groups pushed into the 389.  Is there a way
we can accomplish this?   I'd rather not cruft up the 389 with groups that
we'll likely never use at all.

Thank you,

Matt Robinson
IT Development Manager
Computing & Information Technology Services
University of Massachusetts Dartmouth

Claire T. Carney Library, Suite 415
285 Old Westport Road
North Dartmouth, MA  02747
tel: 508.999.8119

--

David Langenberg

Identity & Access Management Architect

The University of Chicago