Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG


Chronological Thread 
  • From: Dominique Petitpierre <>
  • To: Jeffrey Williams <>
  • Cc: Grouper-Users <>
  • Subject: Re: [grouper-users] Is there a way to add the gidNumber attribute to existing Active Directory groups using PSPNG
  • Date: Fri, 18 Sep 2020 00:36:07 +0200
  • Organization: University of Geneva

Hello,

thanks for the information:

On 17.09.20 22:54, Jeffrey Williams wrote:

Hence my question:
- How is the Grouper group idIndex generated?, i.e. what is its possible range?

- Correct? Can we be sure it is not going to change to a different generation algorithm (random or larger start values, or even change format to something else than a decimal number)?

I hope so!:  because there are other groups with a gidNumber value in our directory and, in order to avoid value collisions the gidNumber attribute, it is set with an offset of 2000000:

||gidNumber: ${group.idIndex + 2000000}
It is better if you modify grouper.properties and set your minIndex there:

https://spaces.at.internet2.edu/display/Grouper/Integer+IDs+on+Grouper+objects

You can set minIndexes independently for groups, stems, attribute defs, and attribute defNames.

Nice! I assumed that idIndex was something internal hidden deep down some code so I didn't even searched the wiki.

Thus I am reassured: idIndex values won't be affected by a change in a future release of Grouper.

From the comment
"The ID's are not used anywhere else in Grouper, so if you need to adjust them feel free,..."
I deduce that one could assign manually the idIndex of a Grouper group with the value of the gidNumber of a preexisting  corresponding target directory group, provided that a suitable idIndex.group.minIndex is configured.
This then allows to use the gidNumber as the matching attribute in the PSPNG singleGroupSearchFilter property for all groups, independently of where they were created first.

Note: an example of gsh script to change the idIndex of a group would be a welcome addition to the wiki page.

Thanks again for the advice and link.

Regards,

-- 
Mr Dominique Petitpierre, user=Dominique.Petitpierre domain=unige.ch
IT Division, University of Geneva, Switzerland



Archive powered by MHonArc 2.6.19.

Top of Page