grouper-users - Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG
Subject: Grouper Users - Open Discussion List
List archive
Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG
Chronological Thread
- From: Dominique Petitpierre <>
- To: Jeffrey Williams <>
- Cc: Grouper-Users <>
- Subject: Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG
- Date: Fri, 18 Sep 2020 00:36:07 +0200
- Organization: University of Geneva
Hence my question:
- How is the Grouper group idIndex generated?, i.e. what
is its possible range?
- Correct? Can we be sure it is not going to change to a
different generation algorithm (random or larger start
values, or even change format to something else than a
decimal number)?
I hope so!: because there are other groups with a
gidNumber value in our directory and, in order to avoid
value collisions the gidNumber attribute, it is set with
an offset of 2000000:
||gidNumber: ${group.idIndex + 2000000}
Nice! I assumed that idIndex was something internal hidden deep down some code so I didn't even searched the wiki.
Thus I am reassured: idIndex values won't be affected by a change
in a future release of Grouper.
From the comment
"The ID's are not used anywhere else in Grouper, so if you need to
adjust them feel free,..."
I deduce that one could assign manually the idIndex of a Grouper
group with the value of the gidNumber of a preexisting
corresponding target directory group, provided that a suitable
idIndex.group.minIndex is configured.
This then allows to use the gidNumber as the matching attribute in
the PSPNG singleGroupSearchFilter property for all groups,
independently of where they were created first.
Note: an example of gsh script to change the idIndex of a group
would be a welcome addition to the wiki page.
Thanks again for the advice and link.
Regards,
-- Mr Dominique Petitpierre, user=Dominique.Petitpierre domain=unige.ch IT Division, University of Geneva, Switzerland
- [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG, Siju Jacob, 09/15/2020
- RE: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG, Black, Carey M., 09/15/2020
- Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG, Dominique Petitpierre, 09/15/2020
- Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG, Jeffrey Williams, 09/17/2020
- Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG, Dominique Petitpierre, 09/17/2020
- Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG, Jeffrey Williams, 09/17/2020
Archive powered by MHonArc 2.6.19.