Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-1372

PSPNG ldap-group provisioning is case-sensitive

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 2.3.0.patch
    • 2.3.0
    • provisioning
    • None

    Description

      Group-Member attributes (member in Active Directory, uidmember in posix group, uniquemember in groupofuniquenames, etc) are found three different ways:
      1) Read from the Group object [Always]
      2) Read from the member objects [Often]
      3) Generated by a template [Sometimes]

      Sometimes there are case differences when #1 is compared to results from #2 & #3 and pspng 2.3.0's default settings compares them case-sensitively, causing large, unnecessary ldap operations. -Most ldap-group attributes are not case sensitive.

      This problem should be fixed by adding a pspng configuration setting for ldap-group provisioning that specifies if member attributes should be compared case-sensitively (default: false)

      Attachments

        Issue Links

          Activity

            People

              bert.beelindgren@at.internet2.edu Bert Bee-Lindgren
              bert.beelindgren@at.internet2.edu Bert Bee-Lindgren
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: