Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Poll: Grouper 2.4 and (Old) PSP

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Poll: Grouper 2.4 and (Old) PSP


Chronological Thread 
  • From: "Bee-Lindgren, Bert" <>
  • To: Scott Koranda <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] Poll: Grouper 2.4 and (Old) PSP
  • Date: Thu, 20 Sep 2018 17:24:45 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23:/l1pjBV2jLBgvhdHwpqdO5GPVzvV8LGtZVwlr6E/grcLSJyIuqrYZRSFuKdThVPEFb/W9+hDw7KP9fy4BipYud6oizMrSNR0TRgLiMEbzUQLIfWuLgnFFsPsdDEwB89YVVVorDmROElRH9viNRWJ+iXhpTEdFQ/iOgVrO+/7BpDdj9it1+C15pbffxhEiCCybL9uLhi6txndutULioZ+N6g9zQfErGFVcOpM32NoIlyTnxf45siu+ZNo7jpdtfE8+cNeSKv2Z6s3Q6BWAzQgKGA1+dbktQLfQguV53sTSXsZnxxVCAXY9h76X5Pxsizntuph3SSRIMP7QawoVTmk8qxmUwHjhjsZODEl8WHXks1wg7xdoBK9vBx03orYbJiIOPZiYq/ReNUXTndDUMlMTSxMGoOyYZUSAeodM+hWrIf9qFkPrRSiCgahH/ngxiNUinLswaE2z/ktHAfb1wIgBdIOt3HUoc37OKoPT++60rDEwzPCb/NQxDj955LIfQ4nof2UQLl9bNTeyVMzFw/Lk16drpfqMC2P1uQRqWSU9PRvWvy2h24jqgFxpCWgxsg2iobXgIIY0VfE9SRlwIovKt23UlJ7bsC4H5tQrS2VKZZ5Qt47TmxupS00xLoGuZuhcygLzpQq3xnfa+adfIeU5hLsSvydLit/hHJgfr+0mhW88VC4x+DzSsW4yktGojZHn9XWtH0Bygbf5tWaRvZ85kutxDmC2g7J5u1aPEw5lbDXJ4Mlz7IqiJYfrEfOEjf4mEroj6KaakAp9+2o5uv7bbjropqROoBuhQ3iLqsjn8iyDOskPQUKWmWU4+ex2KD+8kD/Xb5ElOc5krPDv5DfPckbprC2AwtS0os78xiyEzCo3MgYkHUeMV9KegyLg5HuO17VPv/0F/C/g0mwkDhwwPDGI7vhDYjXInjbirfheqp95FBAxwovzNBf4JRUBqsGIPLuRk/xsNvYDhg6MwCu3+nnD9B92psfWWKJHKCZLLvfvFCU6u41PuWAeI0YtCz/JvQ4/fLikGI1lF4Fcamsx5QXaXS4Hvp8I0WeZHrhmswOHnkQvgoiVuDlk0ONXiBKa3a2XqI84Cw0CI28DYjdQICgm7uB3CanHpFMaWBJEEyMHmn0eIWEQfsDdj+dItJ5njweSbehU5Mh1Q2ptALixLpnNO3U+jAAtZ39zth5/vDTlQos+jxuFMSQyGWNT2BvnmMUXD86wrpzoU17ylefz6d4mfpYGsJP5/9XSAs1K4PTz/EpQ+z1DznKecuVAHWhWNygDTh5GskyxMUHZUp0M9qnhxHHmSGtBulGuaaMAcl+2K/RmlzwIcpy0XvAkOELgkM6CIMbP2C8muh1+gWWA4/Pn0qDmqCCcqUAmiHE6GqIzSyDsFwOA104arnMQX1KPhielt/+/E6XCub2Ue59YAJc1c6PLLdLYdT1jFJAAe3uI8naf3nuxjWrHRjdwLSKYcKqYGgb0CjHQGk82wEItTfjV0AlAzu55WfXDThgD1XqNknh6/U4on62C0s1yQ2FdUBn/7205lgajOCRQPNV074Z628s
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Scott,


I think provisionedAttributeValueFormat is the gateway to some existing solutions, or perhaps a place to add enhancements...


Since group.name is a java string, some manipulations (like removing a prefix or some regex processing are possible).



I also wonder if there is a Pattern.compile(regex).matcher(group.name).group(#) _expression_ that would enable more regex manipulation. I'll have to test this to see what is possible and what might be missing.


Please let me know what you think.


Thanks,

  Bert





From: <> on behalf of Scott Koranda <>
Sent: Thursday, September 20, 2018 10:52 AM
To: Bee-Lindgren, Bert
Cc:
Subject: Re: [grouper-users] Poll: Grouper 2.4 and (Old) PSP
 
Hi,

> What features do you use within PSP that are missing in PSPNG?

The PSP by its nature allows for finer grained control over how details
are provisioned. Because the PSP includes functionality from the
Shibboleth libraries one can configure sophisticated transformations on
the data before it is provisioned. I have used that functionality in a
couple of deployments to work around "interesting" challenges.

As a concrete example here is a snippet from a psp-resolver.xml file
that uses a regex to strip off a prefix from the group name before it is
provisioned as the value for the isMemberOf attribute on a person
record:

  <resolver:AttributeDefinition
    id="memberIsMemberOf"
    xsi:type="Mapped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
    sourceAttributeID="name">
    <resolver:Dependency ref="memberIsMemberOfUnfiltered" />
    <ValueMap>
        <ReturnValue>$1</ReturnValue>
        <SourceValue>(^My\sPrefix:.+)</SourceValue>
    </ValueMap>
  </resolver:AttributeDefinition>

I do not immediately see how to do that with the PSPNG. I see the
'provisionedAttributeValueFormat' configuration option, but I do not see
how I can configure an arbitrary regex transformation.

I would be happy to learn how the PSPNG can currently provide the same
functionality.

Thanks,

Scott K



Archive powered by MHonArc 2.6.19.

Top of Page