Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Checking group name uniqueness across multiple sources

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Checking group name uniqueness across multiple sources

Chronological Thread 
  • From: Jeffrey Crawford <>
  • To: Greg Haverkamp <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] Checking group name uniqueness across multiple sources
  • Date: Tue, 27 Mar 2018 10:20:02 -0700
  • Ironport-phdr: 9a23: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

Hey Greg,

This is probably what you want, welcome to the Grouper Collective :)

Jeffrey E. Crawford
Enterprise Service Team
    ^         ^
   / \  ^    / \    ^
  /   \/ \  /   \  / \
 /        \/     \/   \
/                      \

You have been assigned this mountain to prove to others that it *can* be moved.

On Mon, Mar 26, 2018 at 1:12 PM, Greg Haverkamp <> wrote:
Warning: I’m largely a complete n00b.

After years of poking at Grouper, we’re pushing through with getting it ready to deal with some specific use cases, the most important of which is publishing Google Groups.  We manage the  namespace entirely from our enterprise directory, and we use a simple RESTful API to make name availability accessible.  e.g.:

GET .../assignments/gahaverkamp

will check for any existing email address (appends, email alias, mail forward, Google Group, as well as a couple of other naming contexts.  We don't permit any reuse among these sources.  All of these names are stored in one attribute or another in the directory.

So, I'm trying to understand either the "right" way or a "best" (or even "better") way to do this, without a whole lot of experience with Grouper.  I'm pretty much only armed with documentation, a few aborted instances, and a couple of years on the grouper-users list.

Essentially, I want to intercept group creation to check to see if a desired Google Group group name clashes with another name in our namespace.  Off-hand, it appears to me that there are two options:
1. Write a hook that makes the RESTful call.  This seems like the most straightforward solution, but it also seems a little daunting to a person just starting out with Grouper.  Plus, I'm the only person on my team who writes Java, so we've eliminated it where possible.  (We've still got a fair amount of Java, what with our custom Shibboleth modules and stuff, so this may be a non-issue.)

2. Bring in all of the data as subjects.  People are already coming in, and we could include the alias attributes (lblAccountMailAlias and lblAccountUsernameAlias).  Mail forwards (i.e., what most people would call "sendmail" aliases) and existing Google Groups live as distinct object classes in the directory, as well, though not as people.  So, presumably they could all be brought in as subjects and could be deconflicted that way.

3(?) I don't know if Rules make sense over hooks, or if they're even a viable possibility.

#1 strikes me as the cleanest, because it keeps all of the logic where it is, is agnostic to location (e.g., if we ever move that information out of the directory into a database or an IdM system, we'd just have to update the location of the call.)  #2 seems, with enough work, potentially doable entirely in Grouper as it stands, though I'm not sure if it actually is possible to check all of those additional attributes as well as subject names.  

Any recommendations on the "best" way to approach this?


Archive powered by MHonArc 2.6.19.

Top of Page