Grouper Users - Open Discussion List

["Bee-Lindgren, Bert" <>]

You're right that the BaseDn has to be above all groups, but the following should help:

1) you can/should search for groups by objectclass&gidNumber (which the template should define as the Grouper group index)

2) You can use jexl and commas in the dn of the template to create groups in the OUs you desire. 

3) if this is an existing tree of groups, everything should be okay after you manually populate the gidNumbers somehow

What do you think?

--Bert

On Jan 25, 2019, at 8:48 PM, Andre Daniels <> wrote:

Hello,

I am a not sure how to best configure pspng to provision to an ldap ou that has a folder-like hierarchy and groups with similar names. The groupSearchBaseDn does not appear to accept a jexl _expression_, so how does one prevent name collision? If I set the baseDn to allGroups, how does the provisioner determine whether a given update is for the allGroups:groupA:admins or allGroups:groupB:admins?

Thanks,

Andre

--

Andre Daniels 

Sr. Developer/Security Analyst

University of California Santa Cruz

(831) 459-1980