grouper-users - Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun)
Subject: Grouper Users - Open Discussion List
List archive
- From: Jeffrey Williams <>
- To: "Coleman, Erik C" <>
- Cc: "" <>
- Subject: Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun)
- Date: Thu, 7 Jun 2018 14:16:35 -0400
- Ironport-phdr: 9a23:mn621ROtpBvnrlzszdol6mtUPXoX/o7sNwtQ0KIMzox0Ivj+rarrMEGX3/hxlliBBdydt6oZzbKO+4nbGkU4qa6bt34DdJEeHzQksu4x2zIaPcieFEfgJ+TrZSFpVO5LVVti4m3peRMNQJW2aFLduGC94iAPERvjKwV1Ov71GonPhMiryuy+4ZLebxlIiTanfb9+MAi9oBnMuMURnYZsMLs6xAHTontPdeRWxGdoKkyWkh3h+Mq+/4Nt/jpJtf45+MFOTav1f6IjTbxFFzsmKHw65NfqtRbYUwSC4GYXX3gMnRpJBwjF6wz6Xov0vyDnuOdxxDWWMMvrRr0yRD+s7bpkSAXwhSgFOT438G/ZhM9tgqxFvB2svAZwz5LObYyPKPZyYqHQcNUHTmRBRMZRUClBD5u4YYQRAeoBM/xYoJf9plATrRS+BA2sBOfuyjBSg3/2xrAx3uMjEQHI0g0gHtYOsHDVrNrvL6oSTOa1w7XHzTnZcfxZxCr95ZHOfxs8r/+MWrdwftDQyUkpDw7FgU+QqYv4PzONzOgNtXKU7+9+Wu63lm4nrR1+oje1yscqlIbJmpoZyk3C9Splz4Y5P8O3R1NmYdOiDZBetDmaOpNoTs4jX21luiM3yrMFtJGgYCQHzZsqywLDZ/ObdoWH/g7vWeaULDp9mn5pZqiwihCv+ka60OL8TNO70FNSoypFjNbMsncN2gTW6sedS/t9+l6t2SiM1wzP8+1FLl44mbTBJJI7zb4wkZ0TsUvHHiDogkn5kKiWdkA89uip7eTofKnmq4eCO4J1lg3zMKEjmsK8DOsjLgQDWmeW9fig2LL/+ED2XKlGg/0zn6TcrpzWO94Uqra8AwBP04Yj7xi/Dy2h0NQdhXQHLlxFeRyGj4jtP1HOIer3AOyig1SqjDhryOrKMaP8DZXQNnTDiqvufa5h605Azwo+1d9f54hTCrEcOPL8RFXxuMXFDh8iLQO02f3nBc551oMfQmKPHrSZPL3IvV+J4OIvP/eDZJUTuDnjN/gp+eTigmEkll8ALuGV2s5dQ3e8E/FvJQHRTGDtgZ8qWy9eswE1ZO3ujFyEVj9IIXu+QvRvyCs8DdeEAInNXI28yIOA2CO6F5hNLjREBE+NFXPpfq2ZXfwDLi+eP5kywXQ/SbG9Rtp5hlmVvwjgxu8/Iw==
I'll take a stab with:${group.eValue("mail", false).replace(":","-")}I do something similar in our Google Groups connector in dev, so that it'll replace our @uncg.edu's with @uncg.net's-Jeff--On Thu, Jun 7, 2018 at 1:42 PM, Coleman, Erik C <> wrote:I am progressing with PSPNG running pretty smoothly now, so I’m moving on to prettying up the data, but encountered another snag… we are pushing most groups to a single flat OU, using the ${group.name} the group as the CN (i.e., “stem1:mygroup”). And by default, if you don’t specify samAccountName in groupCreationLDIFTemplate, that ends up getting assigned a random value by AD, which is rather ugly and unusable in some interfaces.
I’d like to set the samAccountName to something equally unique, but of course I cannot use “:” colon characters in AD group names so ${group.name} fails. Setting samAccountName to ${group.extension} is potentially not unique if I have two groups with the same extension (i.e., “stem1:mygroup” and “stem2:mygroup”).
So is there some clever JEXL trick that I can do to replace “:” with a hyphen “-“ in the ${group.name}? Or can I do something like “${group.parentStem}-${group.e
xtension}”? Does anyone have some LDIF templates they’d be willing to share? It is so hard to test JEXL!
Thanks!
-Erik
--
Erik Coleman <>
Identity and Acccess Management
Technology Services
University of Illinois at Urbana-Champaign
Jeffrey Williams, Identity Management Specialist
Identity Architecture, ITS
University of North Carolina at Greensboro
256-TECH (256-8324)
Identity Architecture, ITS
University of North Carolina at Greensboro
256-TECH (256-8324)
- [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun), Coleman, Erik C, 06/07/2018
- Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun), Jeffrey Williams, 06/07/2018
- Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun), Jeffrey Williams, 06/07/2018
- Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun), Julio Macavilca, 06/07/2018
- Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun), Jeffrey Williams, 06/07/2018
- Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun), Jeffrey Williams, 06/07/2018
Archive powered by MHonArc 2.6.19.