...
To provision, polling every 60 seconds for changes :
...
bin/gsh.sh
...
-psp
...
-bulkSync
...
-interval
...
60
...
To calculate how an object should be provisioned :
...
...
bin/gsh.sh
...
-psp
...
-calc
...
stem:groupName
...
no arguments | Display usage. |
| Calculate provisioning for all identifiers. |
| Determine provisioning difference for all identifiers. |
| Synchronize provisioning for all identifiers. |
| Calculate provisioning for an identifier. |
| Determine provisioning difference for an identifier. |
| Synchronize provisioning for an identifier. |
| Provisioned object or schema entity id. For example, group, member, etc. |
| Number of seconds between the start of recurring provisioning iterations. If omitted, only one provisioning cycle is performed. |
| Path to configuration directory. |
| Log SPML requests and responses. |
| Print SPML responses to output file. Defaults to stdout. |
| Print SPML requests as well as responses. |
| SPML request identifier. |
| Return data (identifier and attributes). |
| Return everything (identifier, attributes, and references). |
| Return identifier only. |
| Target identifier. |
...
This configuration example applies to OpenLDAP, and includes provisioning the mailLocalAddress attribute sourced from the Grouper attribute framework.
examples | |
DN structure | bushy |
| member DNs |
| member names |
| group names |
For this example, a (new attribute framework) attribute of etc:attribute:mailLocalAddress will need to be created in Grouper. Here is example code using the Grouper API :
| Code Block | ||||
|---|---|---|---|---|
| ||||
GrouperSession.startRootSession();
Stem etcAttributeStem = StemFinder.findByName(GrouperSession.staticGrouperSession(), "etc:attribute", true);
AttributeDef attributeDef = etcAttributeStem.addChildAttributeDef("mailLocalAddressAttributeDef", AttributeDefType.attr);
attributeDef.setAssignToGroup(true);
attributeDef.setMultiValued(true);
attributeDef.setValueType(AttributeDefValueType.string);
attributeDef.store();
etcAttributeStem.addChildAttributeDefName(attributeDef, "mailLocalAddress", "mailLocalAddress");
|
...
examples
...
psp-example-grouper-to-openldap
...
DN structure
...
bushy
...
member
...
member DNs
...
hasMember
...
member names
...
isMemberOf
...
Configuration Example : Grouper to Active Directory
...