Skip to Content.
Sympa Menu

grouper-users - [grouper-users] PSPNG Group rename events....

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] PSPNG Group rename events....


Chronological Thread 
    < Chronological >      < Thread >
  • From: "Black, Carey M." <>
  • To: "" <>
  • Subject: [grouper-users] PSPNG Group rename events....
  • Date: Sat, 27 Jul 2019 03:50:06 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1;spf=pass smtp.mailfrom=osu.edu;dmarc=pass action=none header.from=osu.edu;dkim=pass header.d=osu.edu;arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kecqOxzYD8B/zJzAkFyd0kPM6rjF1uvyCV4nKL2TWtI=; b=H1cKsoPn6SHSidjt0lh6TMg8FxFxTnaIvQkyWDKmmxfdQE5SJ1ugTqQi7zr7wAUcSZvHctbkpXgphSuLPhdLRdp1H6JTE26p6vK9kPiNjdCCP3Y7qqTlu3mKUZ+zjp/FXNAxiOPCa/fsy05+0imk9bYmIFmF2HO21bGVA6rUpBCFgNc956NVdPChB2lRH847GxeTkFO/RSI+U6ioJa+dCTqofts4dbAhq5dTRIqoz/4zvk4o/ZBQM+ha69vT0lmPN0UeEFrm50jYHiwyQ+BW8CbV0p0AAUDkc94QcAuIaRFT+uDJ6PJzSF6EZwLVO1ndJH7Z3CK7fY+ZnEHoVelYGA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dBVNLPRkvoroBzOVhMrEzArA0viYU9UrkVuqyJTdPBIfcw9MPOv8m5cs8Vvvkez2SFbDtMMtVlsPVa0RcIRBZ4eT3gjFGWY8AvMHuVQPGI6B80QGJDYuwv1lxwKOeKrTwX8WQfxAVmvM06Au9OOepF6vohLQofZVKgzkgBDLxngsWyeqeaOdc/xjUjT4D7bZ1vJulSMxpq1bKeep7ycaykI9EHlQcIqnsOhs8xPf/EeupE5UgEg7MSQA4JdeW2KS/GXNENXUGfs3ImsvDFGU7JH2napm6qsa0QdUwTg0518zrSPNZI00cMJfd/bbGTojG9DnhduBFUg0IkV0N8Alrw==
All,

Experimentally, it looks like PSPNG does not rename AD groups when the
Grouper name for the group is updated. It appears to create a new group and
"abandon" the old group.
NOTE: Maybe I need to change something in the PSPNG config to avoid
that behavior?
Also The old group was not deleted. Likely because I did not set
grouperIsAuthoritative=TRUE . If I had that set, I would guess, but have not
verified, that the group with the "old name" might have been deleted.


I find it troubling that a new group would be created and populated because
it would not provide any way old for any application dependent on the AD
group ( maybe by it's GUID ) to be able to follow the rename. Rather the
observed behavior would pull the rug out from under the group and maybe leave
it lay there growing stale.

Any advice from the PSPNG users out there?
Is there a way to get PSPNG to rename the existing group?

--
Carey Matthew


Archive powered by MHonArc 2.6.19.

Top of Page