Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] PSP Provisioning a large group with small set of users to Active Directory at a time

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] PSP Provisioning a large group with small set of users to Active Directory at a time


Chronological Thread 
    < Chronological >      < Thread >
  • From: "Morgan, Andrew Jason" <>
  • To: " Mailing List" <>, Siju Jacob <>
  • Subject: Re: [grouper-users] PSP Provisioning a large group with small set of users to Active Directory at a time
  • Date: Sat, 28 Mar 2020 20:16:57 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oregonstate.edu; dmarc=pass action=none header.from=oregonstate.edu; dkim=pass header.d=oregonstate.edu; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Rdw7LUr4S6aKXNWHuNssrj5FidkMAdzXhQxVdp5yIdQ=; b=Wfm69eaCQDgMtfSsPGgwYUlwnPWCbmZMhtUl8g7TNkmzHBtpqsW+INxVucIL+bHDqvIpRMh62weAPqkX4uR+gfI9R2QOmCw6Z31enqKbWUC/7tVBOsjQSS5FqOobRTrie7INNfR8AyjRnsKF8jKGkYi9dllpyhc7yo750Fo3xpZavx6HCwNBYVrW2ghObxTzoJGIBfyhAUAGvfp9ux/eA/Lj38zkZP2W7rpyBmFBIA3I10b9LLrUq+rf1zCQyvuJVKiLX4h38fX62Gua7ZSASl0CES2BPiDljgFs+Pzucc4qdzt30hFGle94k/7xPExZEdpyzn/xX4QH9W/3NOUM/g==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mRwHao9HRdcYbDPzfA/IxHfPZqdaN46c3aTMIpk9THUVFQ8auJwssAeP2x4/NjyXI22rMxEViXBZogv+3U2U2fByaSZLCXVYh+6umwRqiS12AyhUYV1H1ipaAwOdVXSY+IzHE5znaXfxQpJV7eB826xH2wHRq1DolAUirfXBo1J0meEOrfnVpyJFyBeCDiQ0HlH+Xaqm4qdU6oKt2FlitYlum19tH4KqG6z/Js5by169AlWJ+NPQtun0jmpkuD4vLBx4hg9+mitIrY8ptvkvLGKEk5k+QeKoCYZX+WpLtYxQ8FqnRk4gGZWGCMoX3zhJHZrF8Ih6zZ1OfnJMUUTElA==
Siju,

I'm not aware of a way to control PSP's behavior that way.  I ran into this same issue as well.  Our AD won't accept more than 5,000 operations in a single transaction, so it was impossible to use gsh -psp -sync on a large group if some error occurred during the original creation.  I ended up writing a Perl script to add members to an AD group in chunks of 5,000.  I can share this script if it would help you.

We just upgraded to v2.4 with PSPNG.  I'm not sure if this same issue exists with PSPNG.

Thanks,

Andy Morgan
Identity & Access Management
Oregon State University

From: <> on behalf of Siju Jacob <>
Sent: Saturday, March 28, 2020 10:45 AM
To: Mailing List <>
Subject: [grouper-users] PSP Provisioning a large group with small set of users to Active Directory at a time
 

Hi Team,

       We are using grouper 2.3 PSP to provision a reference group with 80,000 members to Active Directory.

      Does grouper have any configuration in PSP to restrict the number of members in each update request to Active directory.

    I mean is it possible to configure the PSP to make 8 update request to Active Directory with 10,000 members in each request instead of single request with all 80,000 members to Active Directory.

      Any advice or guidance will be of great help and would be greatly appreciated..!

 

Thanks,

Siju Jacob


Archive powered by MHonArc 2.6.19.

Top of Page