Grouper Users - Open Discussion List

[Siju Jacob <>]

Hi,

   I have one more question …

 

While provisioning a group to active directory from grouper if there is multiple folders under base stem can we restrict only few of the folders to be provisioned.

 

For example below is our grouper structure. I want only the sp folder to be provisioned in active directory

 

 

It should be provisioned in OU=SP folder of Active Directory.

 

 

When I give the below settings in ldap.properties file to restrict the provisioning only to sp folder from grouper. All the groups are provisioned directly under

Apps folder in active directory. Is there a way to customize it.

 

edu.internet2.middleware.psp.groupsBaseDn=OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu

 

edu.internet2.middleware.psp.baseStem=apps:sp

 

Any advice or guidance would be greatly appreciated..!

 

 

Thanks,

Siju

 

 

From: Siju Jacob
Sent: Friday, January 12, 2018 4:44 PM
To: 'Hyzer, Chris' <>; Mailing List <>
Subject: grouper api version 2.2.0. Is there a way to give a customized name to group while provisioning it in LDAP

 

Hi,

   I am Siju Jacob from Rutgers University IT Team. I am new to Grouper.

We are trying to provision a group from grouper active directory.  Is there a way to give a customized name to group in active directory when we provision it there instead of same group name as in grouper.

   For example we have Users group in grouper, while provisioning it to Active directory we want it to be named as ru-sharepoint-users

 

   Please let me know if there anyway we could achieve this.

 

Any advice or guidance would be greatly appreciated..!

 

Thanks,

Siju

From: [] On Behalf Of Hyzer, Chris
Sent: Thursday, January 11, 2018 9:47 AM
To: Mailing List <>
Subject: [grouper-users] latest UI patch: attribute name editor and inherited privilege improvement

 

The latest UI patch (grouper_v2_3_0_ui_patch_37) that Vivek and I have been working on contains two enhancements:

 

1.       Attribute name editor

GRP-1648: Move attribute def name create/view/edit Lite UI to New UI
https://spaces.internet2.edu/display/Grouper/Grouper+attribute+name+editor+in+new+UI

2.       Inherited privileges immediate assignment.   If you assign inherited privileges in the Grouper UI it will immediate propagate to descendant objects.  If this takes longer than 20 seconds it will continue processing in a thread and tell the user it is happening.  If it takes less than 20 seconds the UI will let the user know it is done.

GRP-1651: inherited privileges should assign those privileges to subobjects

 

Thanks

Chris