...
CHEMIN | CORRECT OU INCORRECT |
|---|---|
C:/Program Files/Tomcat | Incorrect |
C:/Tomcat | Correct |
Grouper 1.6.2 and GrouperWS must be installed and available. Obviously, grouper /1.6.3 database must be accessible for the API to work
The custom "escosubjectextension1.1.jar" must be in the "lib" directory, to be able to retrieve multivalued attributes from the LDAP. (Fix of Grouper bug https://bugs.internet2.edu/jira/browse/GRP257).
The attributes you want to see in the application must have been declared in the "source.xml" file. (example in "Grouperws "source.xml" example" section).
Restriction
You can't use 2 ESCOGrouper portlets on the same portal because of session's problems.
Installation
Modify settings.xml file
Modify your settings.xml maven file to add this profile, here is an example of the file :
.
Restriction
You can't use 2 ESCOGrouper portlets on the same portal because of session's problems.
Installation
Modify settings.xml file
Modify your settings.xml maven file to add this profile, here is an example of the file :
| Bloc de code | ||||
|---|---|---|---|---|
| ||||
<?xml version="1.0" encoding="UTF-8"?>
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation | ||||
| Bloc de code | ||||
| xml | xml | <?xml version="1.0" encoding="UTF-8"?> <settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd"> <localRepository>/opt/repo_maven/local/</localRepository> <pluginGroups> </pluginGroups> <proxies> </proxies> <servers> </servers> <mirrors> </mirrors> <profiles> <profile> <id>default</id> <repositories> <repository> <id>central</id> <url>http://repo1.maven.org/maven2/</url> </repository> <repository> <id>ESCO-Grouper-repository</id> <name>ESCO-Grouper repository</name> <url>http://www.esco-portail.org/nexus/content/repositories/ESCO-Grouper/</url> </repository> </repositories> </profile> </profiles> <activeProfiles> <activeProfile>default</activeProfile> </activeProfiles> </settings> |
...
Key | Description | Example |
|---|---|---|
dynamic.key.attribute.ldaprequest | Name of the grouper's attribute used to store the request defining the dynamic group. (name of the attribute in grouper_field table) | rule |
dynamic.value | Name of the custom grouper group type associated to dynamic groups. (name of the group type defined in "grouper_types" table) | dynamic |
tab.regpresent | Replace in the tab the value «dynamique » with the one provided in the "dynamic.value" key. |
|
tab.group.regpresent | Replace in the tab the value «dynamique » with the one provided in the "dynamic.value" key. |
|
Grouper-WS "sources.xml" Example
Here is an example of the "sources.xml" file. This file must contain the LDAP attributes you wanna see in the application. It's located in grouperws "WEBINF/classes/" directory.
| Bloc de code | ||||
|---|---|---|---|---|
| ||||
| Bloc de code | ||||
| XML | XML | <?xml version="1.0" encoding="utf-8"?> <!-- Grouper's subject resolver configuration $Id: sources.example.xml,v 1.7 2008/11/22 21:39:14 mchyzer Exp $ --> <sources> <!-- Group Subject Resolver --> <!-- NOTE: It is recommended that you **not** change the default values for this source adapter. --> <source adapterClass="edu.internet2.middleware.grouper.GrouperSourceAdapter"> <id>g:gsa</id> <name>Grouper: Group Source Adapter</name> <type>group</type> </source> <source adapterClass="edu.internet2.middleware.subject.provider.ESCOJNDISourceAdapter"> <id>esco:ldap</id> <name>JNDI Source Adapter</name> <type>person</type> <init-param> <param-name>INITIAL_CONTEXT_FACTORY</param-name> <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value> </init-param> <init-param> <param-name>PROVIDER_URL</param-name> <param-value>ldap://172.31.142.71:389</param-value> </init-param> <init-param> <param-name>SECURITY_AUTHENTICATION</param-name> <param-value>simple</param-value> </init-param> <init-param> <param-name>SECURITY_PRINCIPAL</param-name> <param-value>cn=admin,dc=esco-portail,dc=org</param-value> </init-param> <init-param> <param-name>SECURITY_CREDENTIALS</param-name> <param-value>admin</param-value> </init-param> <init-param> <param-name>SubjectID_AttributeType</param-name> <param-value>uid</param-value> </init-param> <init-param> <param-name>Name_AttributeType</param-name> <param-value>ENTPersonLogin</param-value> </init-param> <init-param> <param-name>Description_AttributeType</param-name> <param-value>displayName</param-value> </init-param> <search> <searchType>searchSubject</searchType> <param> <param-name>filter</param-name> <param-value>(& (uid=%TERM%)(objectclass=inetOrgPerson))</param-value> </param> <param> <param-name>scope</param-name> <param-value>ONELEVEL_SCOPE</param-value> </param> <param> <param-name>base</param-name> <param-value>ou=people,dc=esco-portail,dc=org</param-value> </param> </search> <search> <searchType>searchSubjectByIdentifier</searchType> <param> <param-name>filter</param-name> <param-value>(uid=%TERM%)</param-value> </param> <param> <param-name>scope</param-name> <param-value>ONELEVEL_SCOPE</param-value> </param> <param> <param-name>base</param-name> <param-value>ou=people,dc=esco-portail,dc=org</param-value> </param> </search> <search> <searchType>search</searchType> <param> <param-name>scope-attribut</param-name> <param-value>ESCOUAI</param-value> </param> <param> <param-name>filter</param-name> <param-value>(|(cn=%TERM%)(sn=%TERM%)(uid=%TERM%))</param-value> </param> <param> <param-name>scope</param-name> <param-value>ONELEVEL_SCOPE</param-value> </param> <param> <param-name>base</param-name> <param-value>ou=people,dc=esco-portail,dc=org</param-value> </param> </search> <attribute>displayName</attribute> <attribute>ENTPersonLogin</attribute> <attribute>ENTTitle</attribute> <attribute>ENTPersonFonctions</attribute> <attribute>uid</attribute> <attribute>cn</attribute> <attribute>sn</attribute> <attribute>givenName</attribute> <attribute>ESCOUAI</attribute> <attribute>mail</attribute> <attribute>ESCOUAIRattachement</attribute> <attribute>objectClass</attribute> </source> </sources>|||
Summary table of possible keys for the profile management
...