Grouper Users - Open Discussion List

[Baron Fujimoto <>]

We're dipping our toes in the water of containerized Grouper, generally 
upgrading from 2.2 to 2.5. Upgrade issues aside, I have some basic questions 
about containerized Grouper that I hope aren't too stupid. I poked around the 
Grouper doucmentation I could find but didn't find what I was looking for – 
I'm happy to RTFM if someone will point me to TFM.

Some of the pages I've skimmed:
<https://spaces.at.internet2.edu/pages/viewpage.action?pageId=16311927>
<https://spaces.at.internet2.edu/display/Grouper/Grouper+container+documentation+for+v2.5
>

As I understand it on a really high level, the container is a collection of 
all of the components that Grouper will need. With out current deployment, we 
independently manage those components, such as Tomcat and Java. A significant 
part of managing those components is tracking their versions, particularly 
with an eye towards relevant bug and security patches. How do we do we 
identify and track these versions with the Grouper containers? I think I 
understand that any such patches get incorporated into new container 
versions, but how do we perform the risk assessment for currently deployed 
containers? Generally I'm trying to determine how we respond to our security 
groups when they come asking about vulnerabilities.

Is there a difference between the TIER/ITAP(?) containers and those available 
via the Grouper site? My cursory Googling seems to turn up Grouper 2.4 
associated with TIER, but the Grouper site features 2.5? I'm a little unclear 
on the relationship.

--
UH Information Technology Services : Identity & Access Mgmt, Middleware
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum