Grouper Users - Open Discussion List

[Jeffrey Crawford <>]

okay I think I answered my own question here I basically did the following:
${utils.bushyDn(group.name, "cn", "ou").substring(0, utils.bushyDn(group.name, "cn", "ou").length()-28)}

Seems like there should be a better way to do this though.

Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!

---------------------------------------

On Fri, Jun 17, 2016 at 12:12 PM, Jeffrey Crawford <> wrote:

Hello Everyone,

I'm starting a new thread to be clear that this is post patch. It looks like things are working better, however it looks like we are seeing a change in behavior between psp and pspng, specifically regarding to the full LDAP path of a group. for example if you have the following group in Grouper

org:institution:it:substem:admin

psp:

edu.internet2.middleware.psp.baseStem = org:institution:it
edu.internet2.middleware.psp.groupsBaseDn = ou=groups,dc=institution,dc=edu

you get the following DN

cn=admin,ou=substem,ou=groups,dc=institution,dc=edu

---------------------------------------------

pspng:
changeLog.consumer.pspng_GroupOfNames.groupSearchBaseDn = ou=groups,dc=institution,dc=edu

org:institution:it {provision_to = pspng_GroupOfNames}

you get the following DN

cn=admin,ou=substem,ou=it,ou=institution,ou=org,ou=groups,dc=institution,dc=edu


=============================================

Obviously this would be a nightmare to migrate as all devices must now look at a new path. Is there a way to cut off part of the ou path via the utils.bushyDn?

Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!

---------------------------------------