Grouper Users - Open Discussion List

[Paul Engle <>]

David,
  I can't help with the ldaptive setup. I'm just putting the password in
the property for now on my dev box, hoping it gets addressed before we
go production with pspng.

For the bushy dns, I have the following for groupCreationLdifTemplate:

dn: ${utils.bushyDn(group.name, "cn", "ou")}||cn:
${group.extension}||description: ${group.description}||objectClass:
groupOfUniqueNames


  -paul

On 3/21/2017 7:54 AM, Bickel, David wrote:
> Hello grouper gurus,
> 
>  
> 
> We are working on setting up grouper and have run into a few questions
> regarding PSPNG configuration.   We are currently struggling with
> applying security to our ldaptive bindCredential and also utilizing
> util.bushyDn.
> 
>  
> 
> In regards to the bindCredential we are trying to pass that using the
> file created with  morphString as most of the other credentials accept
> that format.  However this does not seem to function as expected.  Has
> anyone else ran into this issue with the ldaptive setup?  Oddly the
> vt-ldap will accept the format but doesn’t seem to be used by our PSPNG
> for syncing out to Active Directory groups.
> 
>  
> 
> Our other question that may be an easier one.  When we attempt to use
> the util/bushyDn per the documentation that notes to use: dn:
> utils.bushyDn(group.name, "cn", "ou").  We get an error that we need the
> objectclass defined.  However when we attempt to add it back using the
> || notation for line breaks the use of the util.bushyDn appears to
> override the || and instead we end up trying to set the dn value to be
> all fo the data instead of just the part before the || notation.
> 
>  
> 
> I greatly appreciate any assistance anyone can provide on either of
> these questions.
> 
>  
> 
> Many Thanks,
> 
> --David
> 
>  
> 
> J. David Bickel
> 
> Identity Management Systems
> 
> Indiana University
> 
> 812-855-6346
> 

-- 
Paul Engle
Office of Information Technology

713-348-4702