...
| Bloc de code |
|---|
<?xml version="1.0" encoding="utf-8"?> <ldappc> <grouper> <group-queries> <subordinate-stem-queries> <stem-list> <stem>groupes</stem> </stem-list> </subordinate-stem-queries> </group-queries> <groups structure="flat" root-dn="ou=Groups,${edu.vt.middleware.ldap.base}" ldap-object-class="groupOfNames" ldap-rdn-attribute="cn" grouper-attribute="name" provision-member-groups="false" > <group-members-dn-list list-object-class="groupOfNames" list-attribute="member" /> <group-attribute-mapping ldap-object-class="groupOfNames"> <group-attribute-map group-attribute="displayExtension" ldap-attribute="description" /> </group-attribute-mapping> </groups> <memberships> <member-groups-list list-object-class="inetuser" list-attribute="memberOf" naming-attribute="name" temporary-directory="" /> </memberships> </grouper> <source-subject-identifiers> <source-subject-identifier source="rennes1:ldap" subject-attribute="id"> <ldap-search base="ou=people,${edu.vt.middleware.ldap.base}" scope="subtree_scope" filter="(uid={0})" on-not-found="warn" /> </source-subject-identifier> </source-subject-identifiers> </ldappc> |
Grouper - annuaire active directory
L'annuaire est utilisé pour la gestion des droits sur des espaces partagés
La synchronisation se fait avec l'outil "LDAPPC"
Les groupes sont placés dans une unité organisationnelle "groupes", en conservant l'arborescence de la base grouper
Configuration ldappc :
| Bloc de code |
|---|
<?xml version="1.0" encoding="utf-8"?> <ldappc> <grouper> <group-queries> <subordinate-stem-queries> <stem-list> <stem>groupes</stem> </stem-list> </subordinate-stem-queries> </group-queries> <groups structure="bushy" root-dn="ou=GROUPER,ou=rennes1,${edu.vt.middleware.ldap.base}" ldap-object-class="group" ldap-rdn-attribute="cn" grouper-attribute="name" bundle-modifications="false" > <group-members-dn-list list-object-class="group" list-attribute="member" /> <resolver-attribute-mapping ldap-object-class="group"> <resolver-attribute-map resolver-attribute="grouptypead" ldap-attribute="groupType" ldap-attribute-empty-value="-2147483646"/> <resolver-attribute-map resolver-attribute="sAMAccountName" ldap-attribute="sAMAccountName" /> </resolver-attribute-mapping> </groups> </grouper> <source-subject-identifiers> <source-subject-identifier source="rennes1:ldap" subject-attribute="id"> <ldap-search base="ou=rennes1,${edu.vt.middleware.ldap.base}" scope="subtree_scope" filter="(cn={0})" on-not-found="warn" /> </source-subject-identifier> </source-subject-identifiers> </ldappc> |