Grouper Users - Open Discussion List

[Andrew Morgan <>]

On Fri, 30 Jun 2017, Jeffrey Crawford wrote:

> Luckly we haven't gone too far using posix groups, but we've had at least
> one system bark with posix names containing ':' in them. Is there a simple
> way to have the psp create cn with something like '.' or '_' as a delimiter
> as opposed to ':'? I know I could make a script but I was hoping there was
> an easier way.

We do this for generating the samAccountName attribute in AD with the PSP. 
In psp-resolver.xml:

  <!-- Static data connector. -->
  <resolver:DataConnector
    id="StaticDataConnector"
    xsi:type="dc:Static">
...
    <!-- dummy attribute -->
    <dc:Attribute id="samAccountName">
      <dc:Value>dummy</dc:Value>
    </dc:Attribute>
  </resolver:DataConnector>

  <resolver:AttributeDefinition
        id="samAccountName"
        xsi:type="ad:Script"
        sourceAttributeID="groupNameInStem">
        <resolver:Dependency ref="StaticDataConnector" />
        <resolver:Dependency ref="groupNameInStem" />
        <ad:Script><![CDATA[
                samAccountName.getValues().clear(); // remove the dummy value
                if (groupNameInStem.getValues().size() > 0) {
                        // Strip the baseStem off the front
                        var regex = 
/^${edu.internet2.middleware.psp.baseStem}:/;
                        var tmp = new 
String(groupNameInStem.getValues().get(0));
                        var tmp2 = tmp.replace(regex, "");
                        
samAccountName.getValues().add(tmp2.replace(/:/g,"_"));
                }
        ]]></ad:Script>
   </resolver:AttributeDefinition>


I forget why we had to create the dummy attribute...

        Andy