Grouper Users - Open Discussion List

[Michael R Gettes <>]

Have tried something like ${ldapUser.getStringValue(“ATTRNAME”)} where
ATTRNAME is the name of the LDAP attribute?  Make sure ATTRNAME is also
in the userSearchAttrbiutes list.  I haven’t tested this yet but based on some
other stuff done I think this should work.  You could do 
ou=${ldapUser.getStringValue(“ATTRNAME”)}
I’d be interested in your results.

/mrg

> On Feb 16, 2017, at 11:34 AM, Paul Engle 
> <>
>  wrote:
> 
> All,
> 
> I'm finally making some headway on trying to port our provisioning from
> psp to pspng in preparation for the move to 2.3.0. I've got a pretty
> good feel for how things work in the new config, but I'm hitting a wall.
> 
> The scenario: We have groups with user-defined attributes on them. What
> I would like is to have the value of that attribute be populated as an
> LDAP attribute on the members' LDAP entries. But I'm having trouble
> figuring out the magic to use for the provisionedAttributeValueFormat
> property that will access a user-defined group attribute instead of the
> built-ins, like ${group.name}. Has anyone done anything similar and can
> offer any pointers?
> 
>  -paul
> 
> -- 
> Paul Engle
> Office of Information Technology
> 
> 713-348-4702