Grouper Users - Open Discussion List

[Greg Haverkamp <>]

I've got a structure that I think is what you described (other than that I use cn as the branch item, rather than ou, but I don't think that's relevant to the implementation).

I added an additional CN to each group with the full group name:

changeLog.consumer.pspng_app.groupCreationLdifTemplate = dn: ${utils.bushyDn(group.name, "cn", "cn")}||objectClass: groupOfNames||cn: ${group.extension}||cn: ${group.name}||description: ${group.description}

Then my singleGroupSearchFilter can filter on the group name:

changeLog.consumer.pspng_app.singleGroupSearchFilter = (&(objectClass=groupOfNames)(cn=${group.name}))

Greg

On Fri, Jan 25, 2019 at 5:48 PM Andre Daniels <> wrote:

Hello,

I am a not sure how to best configure pspng to provision to an ldap ou that has a folder-like hierarchy and groups with similar names. The groupSearchBaseDn does not appear to accept a jexl _expression_, so how does one prevent name collision? If I set the baseDn to allGroups, how does the provisioner determine whether a given update is for the allGroups:groupA:admins or allGroups:groupB:admins?

Thanks,

Andre

--

Andre Daniels 

Sr. Developer/Security Analyst

University of California Santa Cruz

(831) 459-1980