...
Since we are using a single Attribute Resolver configuration file, identifiers for every object and for every target will need a unique id. Identifiers for group objects are calculated :
| Code Block | ||||
|---|---|---|---|---|
| ||||
<!-- target specific identifiers -->
<resolver:AttributeDefinition id="groupDn-ad-prod" xsi:type="grouper:PSOIdentifier"
structure="bushy" sourceAttributeID="extension" rdnAttributeName="cn" base="ou=groups,dc=example,dc=edu">
<resolver:Dependency ref="GroupDataConnector" />
</resolver:AttributeDefinition>
<resolver:AttributeDefinition id="groupDn-ad-test" xsi:type="grouper:PSOIdentifier"
structure="bushy" sourceAttributeID="extension" rdnAttributeName="cn" base="ou=groups,dc=test,dc=edu">
<resolver:Dependency ref="GroupDataConnector" />
</resolver:AttributeDefinition>
<resolver:AttributeDefinition id="groupDn-openldap-prod" xsi:type="grouper:PSOIdentifier"
structure="bushy" sourceAttributeID="extension" rdnAttributeName="cn" base="ou=groups,dc=example,dc=edu">
<resolver:Dependency ref="GroupDataConnector" />
</resolver:AttributeDefinition>
<resolver:AttributeDefinition id="groupDn-openldap-test" xsi:type="grouper:PSOIdentifier"
structure="bushy" sourceAttributeID="extension" rdnAttributeName="cn" base="ou=groups,dc=test,dc=edu">
<resolver:Dependency ref="GroupDataConnector" />
</resolver:AttributeDefinition>
|
Identifiers for member objects are returned by SPMLDataConnectors, similar to LDAPDataConnectors, which execute searches. The "target" attribute refers to an SPML Provider Spring bean as defined in ldappc-services.xml. The syntax of the SPML SearchRequest is currently unfinished, but will likely resemble LDAP filters for LDAP targets.
...