Grouper Users - Open Discussion List

[Liam Hoekenga <>]

We have several attributes containing "packed" data in our directory - they are basically serialized objects stored as strings.

These objects contain their own attributes that would be useful in defining groups within Grouper.  I would love to expose them in such a way that I could use the LDAP_GROUPS_FROM_ATTRIBUTES loader type, but based on a post of mine back in April, I don't think this is possible.

I would very much like to stick with defining my groups within Grouper UI and using the existing mechanism, but in the event that that isn't feasible... how horrible an idea would it be to create / maintain these groups by using scripts that invoke the Grouper API (via web service?) and schedule them using the system provided cron?

I realize that it may be easier to pull some of this data from the SQL backed campus systems on which the LDAP data is based.  There is a strong desire to use the data in LDAP because it's assembled / transformed / maintained by our IDM system.

I also admit that this might be a "in the land of the hammer" kind of viewpoint.

I welcome suggestions on how to best implement these use cases.

thanks

Liam