Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun)

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun)


Chronological Thread 
  • From: Julio Macavilca <>
  • To: Jeffrey Williams <>
  • Cc: "Coleman, Erik C" <>, "" <>
  • Subject: Re: [grouper-users] PSPNG groupCreationLDIFTemplate (more JEXL fun)
  • Date: Thu, 7 Jun 2018 14:53:12 -0400
  • Ironport-phdr: 9a23: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

I am also provisioning to a flat ou in AD in dev/qa so I'm just doing dn: cn=${grouperUtil.extensionFromName(name)}||sAMAccountName: ${grouperUtil.extensionFromName(name)}
I would look in the javadoc in grouperUtil for the direct parent (perhaps parentStemNameFromName).

Julio


On Thu, Jun 7, 2018 at 2:16 PM, Jeffrey Williams <> wrote:
Correction:

${group.name.replace(":","-")}

On Thu, Jun 7, 2018 at 2:15 PM, Jeffrey Williams <> wrote:
I'll take a stab with:

${group.eValue("mail", false).replace(":","-")}

I do something similar in our Google Groups connector in dev, so that it'll replace our @uncg.edu's with @uncg.net's

-Jeff

On Thu, Jun 7, 2018 at 1:42 PM, Coleman, Erik C <> wrote:

I am progressing with PSPNG running pretty smoothly now, so I’m moving on to prettying up the data, but encountered another snag… we are pushing most groups to a single flat OU, using the ${group.name} the group as the CN (i.e., “stem1:mygroup”). And by default, if you don’t specify samAccountName in groupCreationLDIFTemplate, that ends up getting assigned a random value by AD, which is rather ugly and unusable in some interfaces.

 

I’d like to set the samAccountName to something equally unique, but of course I cannot use “:” colon characters in AD group names so ${group.name} fails. Setting samAccountName to ${group.extension} is potentially not unique if I have two groups with the same extension (i.e., “stem1:mygroup” and “stem2:mygroup”). 

 

So is there some clever JEXL trick that I can do to replace “:” with a hyphen “-“ in the ${group.name}?  Or can I do something like “${group.parentStem}-${group.extension}”?  Does anyone have some LDIF templates they’d be willing to share? It is so hard to test JEXL!

 

Thanks!

 

-Erik

 

 

--

Erik Coleman <>

Identity and Acccess Management

Technology Services

University of Illinois at Urbana-Champaign

 

 




--
Jeffrey Williams, Identity Management Specialist
Identity Architecture, ITS
University of North Carolina at Greensboro
256-TECH (256-8324)





--
Jeffrey Williams, Identity Management Specialist
Identity Architecture, ITS
University of North Carolina at Greensboro
256-TECH (256-8324)






Archive powered by MHonArc 2.6.19.

Top of Page