grouper-users - [grouper-users] Bushy PSPNG to AD provisioning question
Subject: Grouper Users - Open Discussion List
List archive
- From: Jeffrey Williams <>
- To:
- Subject: [grouper-users] Bushy PSPNG to AD provisioning question
- Date: Tue, 28 Nov 2017 17:39:52 -0500
- Ironport-phdr: 9a23:7jFqFxXLLhgOtir86e7E9DhNsXDV8LGtZVwlr6E/grcLSJyIuqrYYx2Bt8tkgFKBZ4jH8fUM07OQ6PGwHzRYqb+681k6OKRWUBEEjchE1ycBO+WiTXPBEfjxciYhF95DXlI2t1uyMExSBdqsLwaK+i764jEdAAjwOhRoLerpBIHSk9631+ev8JHPfglEnjSwbLdxIRmssQndqtQdjJd/JKo21hbHuGZDdf5MxWNvK1KTnhL86dm18ZV+7SleuO8v+tBZX6nicKs2UbJXDDI9M2Ao/8LrrgXMTRGO5nQHTGoblAdDDhXf4xH7WpfxtTb6tvZ41SKHM8D6Uaw4VDK/5KptVRTmijoINyQh/W/XhMJ+j79Vrgy9qBFk2YHYfJuYOeBicq/Bf94XQ3dKUMZLVyxGB4Oxd48BAPQPPeZWtYnyuVsPpga+CgmtAOPvzj5IiWXz3a0hzu8sFgPG3AIuHtIPtHTUqNT1O70JXOCoyqnH0TrDY+lI1jjg9YjFaxYsquyCU7J3dMre00gvFwXdg1Wfs4zlOC6V1vwXv2id9eVgUPyghmg6oA9yujii3tkgh4jVio8Xz13E+yZ0z50pKdC9R0N3fcKoH4dVui6GK4d7QcYvTmR2tCs0y7ALv4OwcjIQx5Q93RHfbuSKc4iW7RLnU+acOTJ4i2hkeLK7nhqy7FKvxvHlWsi7zlpHoCtInsPDtnAK0BzT5cyHReVn8ki93jaP0hjf6uBCIU8qiarWM4Atz78smpcRtEnDECz7l17qgKKTeUgo5vSk5Pjib7r6upORNIp5hwTgPqkgm8GzGeE4PRIPX2if9+S8zrrj/UjhTbVIgP03nKjZsJTeJcQavKG0GBJV0oA/5BawFTupzskXnWQfIFJfZB2Hl5TpO03JIP3gAve/mVOskCpzx//YJL3tG4jNLmPdn7f7ZrZw8EpcyAsozdBD/JJYFKsNIPP1Wk/tqtPYFBk5PBKow+r5EtlyyJ4RWX/cSpOeZazItkKQ6/hqPvKBfpQ9uTDhJuIj6uK0y3I1hAwzZ66siLkaZn6iE+UuHESdZXvlh8xJRWUEoQs6SO3joECEWjEVanqvCfFvrgonAZ6rWN+QDrumh6aMiX+2
I'm working on switching to a bushy hierarchy in grouper and am encountering this sort of error:
--
[LDAP: error code 64 - 00002073: NameErr: DSID-03050E53, problem 2005 (NAMING_VIOLATION), data 0, best match of: 'cn=Class-A_GROUPNAME_MUCHTOOLONG-FORFLATINAD,ou=appName,ou=apps,ou=uncg,ou=devgroups,dc=devauth,dc=uncg,dc=edu'
I based the PSPNG config off of the AD template and the bushy configuration suggestion. This is what I'm currently using for the groupCreationLdifTemplate = dn: cn=${group.name},${utils.bushyDn(group.name, "cn", "ou")}||cn: ${group.name}||objectclass: group
The flat version works fine(except for a 64-char DN limit):
groupCreationLdifTemplate = dn: cn=${group.name}||cn: ${group.name}||objectclass: group
I switch back to flat and it works just fine. Any ideas what I might be missing here?
Jeffrey Williams, Identity Management Specialist
Identity Architecture, ITS
University of North Carolina at Greensboro
256-TECH (256-8324)
Identity Architecture, ITS
University of North Carolina at Greensboro
256-TECH (256-8324)
- [grouper-users] Bushy PSPNG to AD provisioning question, Jeffrey Williams, 11/28/2017
- [grouper-users] Re: Bushy PSPNG to AD provisioning question, Jeffrey Williams, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Bee-Lindgren, Bert, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Bee-Lindgren, Bert, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Jeffrey Williams, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Bee-Lindgren, Bert, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Jeffrey Williams, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Jeffrey Williams, 11/30/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Jeffrey Williams, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Bee-Lindgren, Bert, 11/29/2017
- Re: [grouper-users] Re: Bushy PSPNG to AD provisioning question, Bee-Lindgren, Bert, 11/29/2017
- [grouper-users] Re: Bushy PSPNG to AD provisioning question, Jeffrey Williams, 11/29/2017
Archive powered by MHonArc 2.6.19.