Grouper Users - Open Discussion List

[Chris Hyzer <>]

I think that only works for LDAP_GROUP_LIST, or 
LDAP_GROUPS_FROM_ATTRIBUTES... have you tried with those?

It doesnt work for one group since its not created by loader, but in the 
others it is

Thanks,
Chris

________________________________________
From: 

 
[]
 on behalf of Scott Koranda 
[]
Sent: Wednesday, November 11, 2015 7:39 AM
To: grouper-users
Subject: [grouper-users] LDAP loader group with addIncludeExclude

Hi,

I am using Grouper 2.1.5.

I created an LDAP loader group using the following GSH script:

grouperSession = GrouperSession.startRootSession();
group = new 
GroupSave(grouperSession).assignName("test:members_systemOfRecord").assignDescription("test").assignCreateParentStemsIfNotExist(true).save();
attributeAssign = 
group.getAttributeDelegate().assignAttribute(LoaderLdapUtils.grouperLoaderLdapAttributeDefName()).getAttributeAssign();
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapTypeName(),
 "LDAP_SIMPLE");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapFilterName(),
 "(uid=skoranda)");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapQuartzCronName(),
 "0 0/5 * * * ?");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSearchDnName(),
 "ou=people");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapServerIdName(),
 "dev");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSourceIdName(),
 "test");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSubjectAttributeName(),
 "uid");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSubjectIdTypeName(),
 "subjectId");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapGroupTypesName(),
 "addIncludeExclude");
attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapGroupsLikeName(),
 "test:members_systemOfRecord");

Note the 'addIncludeExclude' value assigned for LdapGroupTypes.

I then ran the loader job.

The group test:members_systemOfRecord is created as I expected with
the memberships that I expected.

The auxiliary groups

test:members
test:members excludes
test:members includes
test:members system of record and includes

were not, however, created.

I found that if I used the admin UI to edit the test:members_systemOfRecord
and check the 'addIncludeExclude' box next to 'Select group types' then
the auxiliary groups are created and function as I would expect.

Is this the expected behavior, or should have assigning the
'addIncludeExclude' value for LdapGroupTypes been enough to create
the auxiliary group structure?

Thanks,

Scott K