Grouper Users - Open Discussion List

[Siju Jacob <>]

Thanks Chad for the valuable advice….

 

From: Redman, Chad [mailto:]
Sent: Thursday, January 25, 2018 8:48 AM
To: Siju Jacob <>; Mailing List <>
Cc: Jared Hoffman <>; Omer Almatary <>
Subject: RE: grouper api version 2.2.0. Is there a way to send single email notification to a admin id when multiple users are removed or added to a group.

 

What about a batch job using the Grouper API to query for all membership changes in a certain amount of time, and then email a summary report? This would be either a Java application or GSH script called from the command line at regular intervals. Depending on what you need, it would give you a lot of flexibility in deciding what is worth sending and where it should go.

 

It would also have the advantage of something that could done on your current installation, instead of needing to upgrade and catch up with any forthcoming patch.

 

-Chad

 

 

From: [] On Behalf Of Siju Jacob
Sent: Monday, January 22, 2018 1:44 PM
To: Hyzer, Chris <>; Mailing List <>
Cc: Jared Hoffman <>; Omer Almatary <>
Subject: [grouper-users] grouper api version 2.2.0. Is there a way to send single email notification to a admin id when multiple users are removed or added to a group.

 

Hi,

  We are using grouper api version 2.2.0. Is there a way to send single email notification to the admin id when multiple users are removed or added to a group.

We want to avoid  1000’s of email to admin at the end of academic year when students are removed from a group.

 

Thanks,

siju

 

From: [] On Behalf Of Siju Jacob
Sent: Tuesday, January 16, 2018 1:49 PM
To: Hyzer, Chris <>; Mailing List <>
Cc: Jared Hoffman <>
Subject: [grouper-users] grouper api version 2.2.0. Is there a way to configure multiple baseStem

 

This sender failed our fraud detection checks and may not be who they appear to be. Learn about spoofing

Feedback

 Hi,

     Is there a way to configure multiple base stems to be provisioned in the same active directory.

 

Something like below in ldap.properties

 

edu.internet2.middleware.psp.baseStem=apps:sp, oit:ad

 

Thanks,

Siju

 

From: Siju Jacob
Sent: Tuesday, January 16, 2018 11:43 AM
To: 'Hyzer, Chris' <>; ' Mailing List' <>
Subject: RE: grouper api version 2.2.0. Is there a way to give a customized name to group while provisioning it in LDAP

 

Hi,

   I have one more question …

 

While provisioning a group to active directory from grouper if there is multiple folders under base stem can we restrict only few of the folders to be provisioned.

 

For example below is our grouper structure. I want only the sp folder to be provisioned in active directory

 

 

It should be provisioned in OU=SP folder of Active Directory.

 

 

When I give the below settings in ldap.properties file to restrict the provisioning only to sp folder from grouper. All the groups are provisioned directly under

Apps folder in active directory. Is there a way to customize it.

 

edu.internet2.middleware.psp.groupsBaseDn=OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu

 

edu.internet2.middleware.psp.baseStem=apps:sp

 

Any advice or guidance would be greatly appreciated..!

 

 

Thanks,

Siju

 

 

From: Siju Jacob
Sent: Friday, January 12, 2018 4:44 PM
To: 'Hyzer, Chris' <>; Mailing List <>
Subject: grouper api version 2.2.0. Is there a way to give a customized name to group while provisioning it in LDAP

 

Hi,

   I am Siju Jacob from Rutgers University IT Team. I am new to Grouper.

We are trying to provision a group from grouper active directory.  Is there a way to give a customized name to group in active directory when we provision it there instead of same group name as in grouper.

   For example we have Users group in grouper, while provisioning it to Active directory we want it to be named as ru-sharepoint-users

 

   Please let me know if there anyway we could achieve this.

 

Any advice or guidance would be greatly appreciated..!

 

Thanks,

Siju

From: [] On Behalf Of Hyzer, Chris
Sent: Thursday, January 11, 2018 9:47 AM
To: Mailing List <>
Subject: [grouper-users] latest UI patch: attribute name editor and inherited privilege improvement

 

The latest UI patch (grouper_v2_3_0_ui_patch_37) that Vivek and I have been working on contains two enhancements:

 

1.       Attribute name editor

GRP-1648: Move attribute def name create/view/edit Lite UI to New UI
https://spaces.internet2.edu/display/Grouper/Grouper+attribute+name+editor+in+new+UI

2.       Inherited privileges immediate assignment.   If you assign inherited privileges in the Grouper UI it will immediate propagate to descendant objects.  If this takes longer than 20 seconds it will continue processing in a thread and tell the user it is happening.  If it takes less than 20 seconds the UI will let the user know it is done.

GRP-1651: inherited privileges should assign those privileges to subobjects

 

Thanks

Chris