Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Quick question re: upgrade from 2.2.2 (PSP) to 2.3.0 (PSPNG)

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Quick question re: upgrade from 2.2.2 (PSP) to 2.3.0 (PSPNG)

Chronological Thread 
  • From: Rob Gorrell <>
  • To: "Hyzer, Chris" <>
  • Cc: Mark Cairney <>, "" <>
  • Subject: Re: [grouper-users] Quick question re: upgrade from 2.2.2 (PSP) to 2.3.0 (PSPNG)
  • Date: Thu, 9 Nov 2017 11:54:23 -0500
  • Ironport-phdr: 9a23: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

On Thu, Nov 9, 2017 at 11:29 AM, Hyzer, Chris <> wrote:
2. Is it possible/feasible to provision multiple LDAP directories from a
single PSPNG instance? We struggled with this with our PSP install and
ended up having 2 instances feeding AD and OpenLDAP independently.

Yes, that is my understanding, unless someone wants to correct me :)

We've wanted to provision 2 different (identical) instances as well, but the problem I hit up against with the original PSP was all our subjects came from a single/common subject-source. So when we configured PSP to provision, it would provision just fine to the destination source that matched the subject source, but the other destination that didn't match the subject-source would only contain a bunch of empty groups with no members as the PSP detected the mismatch of subject vs destination source and intentionally choose not provision. I can see how this makes since in a more distributed subject environment, but for us where all subjects are centralized, but we just want to provision to multiple destinations, it worked against me.

Does this still work the same way in PSPNG? ie, its is assumed that the provisioning source must match the user's subject source?


Robert W. Gorrell
IT Manager, Identity and Access Management
University of NC at Greensboro

Archive powered by MHonArc 2.6.19.

Top of Page