Grouper Users - Open Discussion List

[Sam Erie <>]

My attempt is to resolve ldap groups not yet in grouper.

There are some major Organizational Groups here that are not fully populated with their child groups yet. The goal is to allow grouper users to add groups to the correct Organizational groups through the UI.

I imagine that I could set up loaders to bring all potential ldap groups into grouper, then set up my Organizational group loader with g:gsa as the subject source. Though I'm unsure how the loader will resolve a group member of a group as it loads it (kind of a chicken and egg deal). Would I have to set loaders up so that it starts with groups that only have person subjects, then loads their parents and so on?

What I was trying to do was have a subject source set up that could resolve any ldap group, then only set up the Organizational groups through a loader. I was hoping this would allow the groups already existing in the Organizational groups to come in and be resolved by the ldap group source, then as users need to add child groups to the Organizational groups they could search for an ldap group subject to add it.

This seemed cleaner. What I am trying to set up is a demo to showcase how grouper could help organize our somewhat unorganized group structure in place. Rather than having folders of unorganized groups in grouper I wanted only the Organizational groups.

I suppose I could bring them all into a hidden folder though, and just leave the Organizational groups folder visible. If that is the correct way to do this I will try it. I just thought the source API was set up to allow group subjects, and I am confused as to why it is not resolving groups from my group subject source configured in sources.xml.

Thank you

On Sun, Jun 17, 2018 at 6:30 PM, Hyzer, Chris <> wrote:

Theres already a group source builtin to grouper, g:gsa

 

Ive done groups of groups with SQL but not with LDAP.  Is there a way with a scriptlet and an ldap filter to get the group ID path in grouper?  Or do you want to further resolve an ldap group that is not in grouper?  Can you give an explicit example?

 

From: [mailto:] On Behalf Of Sam Erie
Sent: Friday, June 15, 2018 9:01 PM
To:
Subject: [grouper-users] Group of Groups loader

 

So I am trying to set up a loader job that can bring in Groups of Groups. I think I should be able to make an LDAP_GROUP_LIST where the subjects they resolve could be person or groups. Hopefully I am correct about that much.

 

The problem is setting up subjects that are groups. I tried setting up a group source in sources.xml.

I set the type to group and set everything up (I could upload the relevant part of sources.xml if requested) that I could think of, but I am not sure how to define the member attribute. Ideally it could be defined that member values are treated as subjects that are a member of the group.

 

Is there any documentation on how to do something similar to this that I am missing?

 

Or is this even possible? If not is there a different way to manage Groups of Groups with Grouper that I may be overlooking?

 

I'm at a bit of a dead end with this so any advice would be very helpful.

 

Thank you