At Penn initially we would like to sync up a Grouper group with an AD group. Later on we might want to sync up more groups. We will use a flat namespace in AD.
In Grouper we have a group:
penn:isc:nandt:apps:vdi:vdiTechnicalUsers
In AD we have an OU for groups:
OU=Grouper,OU=LocalAuth,DC=kite-dev,DC=upenn,DC=edu
The group to go into AD should be:
CN=penn:isc:nandt:apps:vdi:vdiTechnicalUsers,OU=Grouper,OU=LocalAuth,DC=kite-dev,DC=upenn,DC=edu
We have the grouperLoader running, we will install the PSPNG inside:
Install pspng
[appadmin@fasttest-mgmt-01 lib]$ pwd /opt/appserv/tomcat/apps/grouperWs/loader/lib [appadmin@fasttest-mgmt-01 lib]$ cp /tmp/grouper.pspng-2.3.0/lib/custom/* . [appadmin@fasttest-mgmt-01 lib]$ cp /tmp/grouper.pspng-2.3.0/dist/grouper-pspng-2.3.0.jar . [appadmin@fasttest-mgmt-01 lib]$ more /tmp/grouper.pspng-2.3.0/README.txt
Patch pspng
[appadmin@fasttest-mgmt-01 classes]$ cd /tmp [appadmin@fasttest-mgmt-01 tmp]$ mkdir installer [appadmin@fasttest-mgmt-01 tmp]$ cd installer/ [appadmin@fasttest-mgmt-01 installer]$ wget http://software.internet2.edu/grouper/release/2.3.0/grouper.installer-2.3.0.tar.gz [appadmin@fasttest-mgmt-01 installer]$ tar xzf grouper.installer-2.3.0.tar.gz [appadmin@fasttest-mgmt-01 installer]$ cd grouper.installer-2.3.0 [appadmin@fasttest-mgmt-01 grouper.installer-2.3.0]$ java -jar grouperInstaller.jar Do you want to 'install' a new installation of grouper, 'upgrade' an existing installation, 'patch' an existing installation, or 'createPatch' for Grouper developers (enter: 'install', 'upgrade', 'patch', 'createPatch' or blank for the default) [install]: patch Enter in a Grouper temp directory to download tarballs (note: better if no spaces or special chars) [/tmp/installer/grouper.installer-2.3.0]: What do you want to patch? api, ui, ws, pspng, or psp? [api]: pspng Where is the grouper PSPNG installed? /opt/appserv/tomcat/apps/grouperWs/loader/
- sdf
s