Details
-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
None
-
None
-
None
-
Container release 2.5.54
Description
DN override seems to be incompatible with flat naming.
The provisioner forces this naming pattern on groups when flat is chosen...
grouper/src/grouper/edu/internet2/middleware/grouper/app/ldapProvisioning/LdapProvisioningTranslator.java, ~ line 56
} else if (ldapSyncConfiguration.getGroupDnType() == LdapSyncGroupDnType.flat) {
dn = GrouperUtil.ldapEscapeRdn(groupRdnAttributeName + "=" + fieldValueString) + "," + ldapSyncConfiguration.getGroupSearchBaseDn();
}
...which results in group names like...
cn=cn\=my-test-group\,ou\=User Groups\,ou\=Groups\,dc\=umich\,dc\=edu,ou=ManagedGroups,ou=Groups,dc=umich,dc=edu
Based on the code in LdapProvisioningTranslator, I don't believe the issue can be worked around with the "proper" Group field name - translation expression