Grouper Users - Open Discussion List

["Guenther, Dean R." <>]

I should have added that the correction Carey made in the doc to assign the PSPNG attribute definition does work with Grouper 2.4. It picked it up and identified it to be provisioned. – dean

 

 

 

 

Dean Guenther                          
Washington State University    Phone:    509 335-0433
Pullman, WA. 99164-1222        fax:      509 335-0540
Identity and Access Management Manager

 

 

From: <> on behalf of "" <>
Date: Friday, October 19, 2018 at 8:58 AM
To: "Black, Carey M." <>
Cc: "" <>
Subject: [grouper-users] Re: setting up a group to use PSPNG with Grouper 2.4

 

Hi Carey,

Thanks for getting back to me. And yeh, I do have wires crossed. I was trying to assign PSPNG attribute definitions. thanks again – dean

 

 

 

 

Dean Guenther                          
Washington State University    Phone:    509 335-0433
Pullman, WA. 99164-1222        fax:      509 335-0540
Identity and Access Management Manager

 

 

From: "Black, Carey M." <>
Date: Friday, October 19, 2018 at 6:05 AM
To: "" <>
Subject: RE: setting up a group to use PSPNG with Grouper 2.4

 

Dean,

 

I think you have a few wires crossed here.

                As far as I know, permissions (objects in grouper) in grouper really don’t have anything to do with PSPNG nor provisioning to AD.

 

The page you referenced appears to be unrelated to PSPNG.

 

I would point you at this page:

                https://spaces.at.internet2.edu/display/Grouper/Grouper+Provisioning%3A+PSPNG

 

NOTE: I don’t use PSP or PSPNG at this time. So I am just reading the docs….

                “PSPNG's Configuration is done via the conf/grouper-loader.properties”

 

                “At this time, the LDAP bindCredential cannot be encrypted via the Grouper morphstring.” ß that is a silly restriction that needs fixed before I could think about moving forward with PSPNG.

 

 

Oh.. maybe you are asking about this section?  “How do I assign PSPNG attribute definitions?”

                I can see that as a point of confusion and maybe why you end up on the other page. J

 

“These attributes need to be assigned to Groups or Folders via the Lite UI.” ( v2.3 )

 

I updated the page to what I *hope* will explain the v2.4 UI changes.

            https://spaces.at.internet2.edu/display/Grouper/Grouper+Provisioning%3A+PSPNG

 

Hope that helps.

 

--

Carey Matthew

 

From: <> On Behalf Of Guenther, Dean R.
Sent: Thursday, October 18, 2018 7:14 PM
To:
Subject: [grouper-users] setting up a group to use PSPNG with Grouper 2.4

 

I would like to provision a group to AD using PSPNG. I’ve setup my grouper-loader.properties and it connects correctly to AD. And the first time after adding to the grouper-loader.properties then grouper created the etc:pspng branch for me. I’ve been reading the wiki article Grouper assign/view permissions in new UI.

 

            https://spaces.at.internet2.edu/pages/viewpage.action?pageId=122716612

 

Is it geared for setting up the provisioning permissions using the Grouper 2.3 interface? (hence the reference to “Lite UI” in the quick links). Because Lite UI isn’t on the Grouper 2.4 main menu.

 

I follow along for the first several steps

 

1. Select “Permissions” from “More actions”
2. Convert to a “role” type
3. click on assign permission (which opens the form)
4. Do I fill out the form? Or go to the next step? I tried filling it out and entered “etc:pspng:provision_to_def” for the permission def and “etc:pspng:provision_to” for the resource name. It doesn’t seem correct, but I wasn’t sure what to put there. And for Action I tried /read/write/create but none of those seem right.

 

and after the fourth screen shot (the one to enter the permission def and resource name) it says

 

            “Clicking on the view permissions link in the Permissions actions dropdown lists all the permissions….”

 

But I don’t see a “Permissions actions” dropdown list anywhere on the page. I just see the “More” and “More actions” dropdowns,

 

 

 

 

what is it I’m missing? thanks – dean

 

 

Dean Guenther                          
Washington State University    Phone:    509 335-0433
Pullman, WA. 99164-1222        fax:      509 335-0540
Identity and Access Management Manager