Skip to Content.
Sympa Menu

grouper-users - [grouper-users] PSPNG Provisioned groups in AD

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] PSPNG Provisioned groups in AD


Chronological Thread 
    < Chronological >      < Thread >
  • From: "Weston, Todd" <>
  • To: "" <>
  • Subject: [grouper-users] PSPNG Provisioned groups in AD
  • Date: Wed, 26 Feb 2020 19:03:10 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=wsu.edu; dmarc=pass action=none header.from=wsu.edu; dkim=pass header.d=wsu.edu; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BVrOGquH23Jaa32wrMkYElUtUficC6tsY2DAeooIULA=; b=FjWB5flQk0CtWqsfy8mgcGWqBg53h2Nm0snsDBn4oaqmGk1kiAPPRkyjyrAFvN0RXqcZwN/gavyzVCM0GfgZmiXmOugCKZiBmfXjuVtMSJzsqWPTdZJH/Y2gU78vZFn6naFcNX96eM47ywbWfKzxYnCfNx7HNSmoIF5ePhmzdY7XTKD5LTlX1a26S7s9K2ceox+TsrTuo/Gncqp7E8RorsPUWIbwSpnKVTqg8IyEFEIPBQUKpEwByVUYxBSfG+fCcPefiU7kviXcM9BfyiwHMdnDZEwmcVQlSyas5nW/Iyc3A3IkkJw1ZCKThf8hANDAq0xj1+GQ8CjY22J2lkwEDQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CjRK0DdvpmyCKusAW241FxC/MmKQozhaT57Efk3HywGokJiKSdC2YoG9Q4k1F4z+LwTbnSdaiiTODRf8u7XD3cokrefCUUIGZFvenH7dBv73FHeUwppv8dq99WMnGP29Jx1usInp010dECtwGPg6fLDm6plByqpzcTxrTJQCHoKX+HWrb0xi2EEQnCYHDB5BdNsi04XKiBTXHWuKa2HyZYhncM3kkvx3gnpYBG9abUTxww6VcAcVrRSFcGVGqX4D7+/zfm44e/gaY6TL1hdQIy2xRb7NWJUhmhTfuyR7CEl33E6KkaE4ktfMsfX1Ueb0xMGzZYFoxt2gZAyiSFRD9A==

I’m new here, so if these have already been covered, please point me in that direction:

 

  1. Manual modifications - What are the implications of an admin editing a grouper-generated group via ADUC or PowerShell and removing or adding users? I would like to have grouper override these changes and force the group membership back to compliance with the compositing/inclusion methods defined in the Grouper config for the group. I did some testing and it doesn’t appear to work that way “out of the box.”
  2. Large groups – We have a large group ( enrolled.students = 27K users) that doesn’t seem to be provisioning (I’ve only been waiting 1 day, so I might just be impatient). Most other groups have been provisioned in AD and populated. Anywhere to look for failures? The grouper_error.log is churning so fast I wouldn’t even know what to look for…

 

I’m an old-school Windows guy, so please don’t assume a lot of Linux context is residing in me…

Grouper 2.4.0, MySQL 5.5

 

-

QR to scan into contacts

Todd Weston

Information Security Analyst, Identity |

Information Technology Services | Washington State University

Phone 509.335.4479 PO Box 641222 Pullman, WA  99164-1222

 

 

 


Archive powered by MHonArc 2.6.19.

Top of Page