| Include Page | ||||
|---|---|---|---|---|
|
Provisioning config
...
| Code Block |
|---|
${if (!grouperUtil.isBlank(gcGrouperSyncMember.getMemberToId2())) {
grouperTargetGroup.addAttributeValueForMembership('member', gcGrouperSyncMember.getMemberToId2());
}
} |
...
| Code Block |
|---|
${grouperTargetGroup.assignAttributeValue('gidNumber', grouperProvisioningGroup.getIdIndex(); } |
...
| Code Block |
|---|
${grouperTargetGroup.assignAttributeValue('dn', 'cn=' + grouperProvisioningGroup.getName() + ',OU=Grouper,OU=365Groups,DC=one,DC=upenn,DC=edu'); } |
...
| Code Block |
|---|
${grouperTargetGroup.setId(grouperProvisioningGroup.getName()); } |
...
| Code Block |
|---|
${grouperTargetGroup.assignAttributeValue('dn', 'cn=' + grouperProvisioningGroup.getName()
+ ',OU=Grouper,OU=365Groups,DC=one,DC=upenn,DC=edu'); } |
...
| Code Block |
|---|
${grouperTargetGroup.assignAttributeValue('cn', grouperProvisioningGroup.getName()); } |
...
| Code Block |
|---|
${grouperTargetGroup.assignAttributeValue('objectClass', grouperUtil.toSet('group')); } |
...
| Code Block |
|---|
employeeID=${targetEntity.retrieveAttributeValue('employeeID')} |
...
| Code Block |
|---|
(&(objectclass=group) (gidNumber=${targetGroup.retrieveAttributeValue('gidNumber')})) |
...
TODO
PSPNG config (legacy)
| Code Block |
|---|
changeLog.consumer.pspng_oneprod.groupSearchAttributes = cn,gidNumber,samAccountName,objectclass
changeLog.consumer.pspng_oneprod.userSearchFilter = employeeID=${subject.id}
changeLog.consumer.pspng_oneprod.allGroupsSearchFilter = objectclass=group
changeLog.consumer.pspng_oneprod.groupCreationLdifTemplate = dn: cn=${group.name}||cn: ${group.name}||objectclass: group||gidNumber: ${group.idIndex}
changeLog.consumer.pspng_oneprod.singleGroupSearchFilter = (&(objectclass=group)(gidNumber=${idIndex}))
changeLog.consumer.pspng_oneprod.groupSearchBaseDn = OU=Grouper,OU=365Groups,DC=one,DC=upenn,DC=edu
changeLog.consumer.pspng_oneprod.userSearchBaseDn = DC=one,DC=upenn,DC=edu
changeLog.consumer.pspng_oneprod.grouperIsAuthoritative = true
changeLog.consumer.pspng_oneprod.userSearchAttributes = dn,cn,uid,mail,samAccountName, uidNumber,objectclass,employeeID
changeLog.consumer.pspng_oneprod.ldapPoolName = oneProdAd
changeLog.consumer.pspng_oneprod.isActiveDirectory = true
changeLog.consumer.pspng_oneprod.memberAttributeValueFormat = ${ldapUser.getDn()}
changeLog.consumer.pspng_oneprod.memberAttributeName = member
changeLog.consumer.pspng_oneprod.type = edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner |
...