Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-487

LDAPPCNG adds member attribute with null value if group has no members

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Fix
    • Minor
    • None
    • 1.6.1
    • provisioning
    • None

    Description

      My config looks like this:

      <ldappc xmlns="http://grouper.internet2.edu/ldappc"
      xmlns:ldappc="http://grouper.internet2.edu/ldappc"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://grouper.internet2.edu/ldappc classpath:/schema/ldappc.xsd">

      <targets id="LDAP">

      <target id="ldap" provider="ldap-provider" />

      <object id="stem">
      <identifier ref="stem-dn" baseId="${groupsOU}">
      <identifyingAttribute name="objectclass" value="organizationalUnit" />
      </identifier>
      <attribute name="objectClass" ref="stem-objectclass" />
      <attribute name="ou" ref="stem-ou" />
      <attribute name="description" ref="stem-description" />
      </object>

      <object id="group" authoritative="true">
      <identifier ref="group-dn" baseId="${groupsOU}">
      <identifyingAttribute name="objectClass" value="${groupObjectClass}" />
      </identifier>
      <attribute name="objectClass" ref="group-objectclass" />
      <attribute name="cn" />
      <attribute name="description" />
      <!-- <attribute name="hasMember" ref="hasMember" /> -->
      <!-- <attribute name="isMemberOf" ref="groupIsMemberOf" /> -->
      <references name="member" emptyValue="" >
      <reference ref="members-jdbc" toObject="member" />
      <reference ref="members-g:gsa" toObject="group" />
      </references>
      </object>

      <object id="member">
      <identifier ref="member-dn" baseId="${peopleOU}">
      <identifyingAttribute name="objectclass" value="person" />
      </identifier>
      <!--
      <attribute name="objectClass" ref="member-objectclass" retainAll="true" />
      <attribute name="isMemberOf" ref="memberIsMemberOf" />
      -->
      </object>

      </targets>

      </ldappc>

      If I create a group test:testGroup in Grouper without any members, the following gets added in LDAP (Sun directory).

      1. test:testGroup, grouper, groups, duke.edu
        dn: cn=test:testGroup,ou=grouper,ou=groups,dc=duke,dc=edu
        objectClass: groupOfNames
        objectClass: top
        member:
        cn: testGroup
        cn: test:testGroup

      Member shouldn't be added with a null value, right? (Or at least I'm assuming it's null rather than something non-printable).

      Attachments

        Activity

          People

            tom.zeller@at.internet2.edu Tom Zeller
            shilen.patel@at.internet2.edu Shilen Patel (duke.edu)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: