Skip to Content.
Sympa Menu

grouper-users - [grouper-users] Multiple searchSubjects in sources.xml

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Multiple searchSubjects in sources.xml


Chronological Thread 
  • From: Philip Harle <>
  • To: "" <>
  • Subject: [grouper-users] Multiple searchSubjects in sources.xml
  • Date: Fri, 4 Nov 2016 11:33:09 +0000
  • Accept-language: en-GB, en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23:uZ+IwhVY3jZPJXcZ53xih20azE7V8LGtZVwlr6E/grcLSJyIuqrYZhyHt8tkgFKBZ4jH8fUM07OQ6PG6HzxRqszQ+Fk5M7V0HycfjssXmwFySOWkMmbcaMDQUiohAc5ZX0Vk9XzoeWJcGcL5ekGA6ibqtW1aJBzzOEJPK/jvHcaK1oLshrr0q8yYOVQArQH+SIs6FA+xowTVu5teqqpZAYF19CH0pGBVcf9d32JiKAHbtR/94sCt4MwrqHwI6Lpyv/JHBO/1ZaMlVbFCSSk9PnouzMztqRTZSwaTvD0RXnhc2k5HGQ/Y9BzgG4rqvzHhnut7xCSAO8DqF/Y5VSn0vIlxTxq9sCcGMz8huEHekMh9xPZDoBOlpgQ5w4fOZIy9MvdhdarGYdcXA2NKGNtSAX8SSrigZpcCWrJSdd1TqJPw8gMD
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Inside of sources.xml we specify the path to the base OU in Active Directory
containing the majority of our user accounts. However, we have a scenario
where our subject user accounts exist across two separate locations in AD.

We currently use the following:
<search>
<searchType>searchSubjectByIdentifier</searchType>
<param>
<param-name>filter</param-name>
<param-value>
(&amp;(cn=%TERM%)(objectclass=person))
</param-value>
</param>
<param>
<param-name>scope</param-name>
<param-value>SUBTREE_SCOPE</param-value>
</param>
<param>
<param-name>base</param-name>
<param-value>OU=Campus
Users,DC=campus,DC=ncl,DC=ac,DC=uk</param-value>
</param>
</search>

Is it possible to specify a secondary location, for example 'OU=Other
Users,DC=campus,DC=ncl,DC=ac,DC=uk' in addition to the one specified above?

I've attempted to construct a search block in sources.xml using numParameters
to allow us to query a second location if the subject is not found in the
first, but I've not had much success.

I realise this could be achieved by specifying the base as
'DC=campus,DC=ncl,DC=ac,DC=uk', however our domain contains a number of other
root OU's that we'd rather not have Grouper search through in order to
maintain performance of the service.

Thanks,

---
Phil Harle
IT Service
Newcastle University



Archive powered by MHonArc 2.6.19.

Top of Page