Grouper Users - Open Discussion List

[Rob Gorrell <>]

On Thu, Nov 9, 2017 at 11:29 AM, Hyzer, Chris <> wrote:

2. Is it possible/feasible to provision multiple LDAP directories from a
single PSPNG instance? We struggled with this with our PSP install and
ended up having 2 instances feeding AD and OpenLDAP independently.

Yes, that is my understanding, unless someone wants to correct me :)

We've wanted to provision 2 different (identical) instances as well, but the problem I hit up against with the original PSP was all our subjects came from a single/common subject-source. So when we configured PSP to provision, it would provision just fine to the destination source that matched the subject source, but the other destination that didn't match the subject-source would only contain a bunch of empty groups with no members as the PSP detected the mismatch of subject vs destination source and intentionally choose not provision. I can see how this makes since in a more distributed subject environment, but for us where all subjects are centralized, but we just want to provision to multiple destinations, it worked against me.

Does this still work the same way in PSPNG? ie, its is assumed that the provisioning source must match the user's subject source?

-Rob

--

Robert W. Gorrell
IT Manager, Identity and Access Management

University of NC at Greensboro
336-334-5954
PGP Key ID B36DB0CA