Opinion on grouper/shib options

[O'Dowd, Josh]

Thanks Rod.  Unfortunately I am not having success with my implementation....

I have taken Scott's direction and created a new DataConnector using the idp-attribute-resolver-api.  I have chosen to extend the AbstractSearchDataConnector and I have completed the class along with its dependencies; such as ExecutableSearch, ExecutableSearchBuilder, MappingStrategy, and Validator.  The dependencies are wired into the new class during constructor.

I have wired the DC into spring using our /conf/global.xml (this does not seem to be working, see below...):
	<bean id="grouperWsDc" class="edu.umt.shibboleth.idp.attribute.resolver.dc.grouper.GrouperWSDataConnector" />

Our attribute-resolver.xml currently loads in LDAPDirectory DC via schema, which provides the bulk of our released user attributes.  The GrouperWS DC is intended to create a single 'isMemberOf' attribute to include in the release.  I have not add anything to attribute-resolver.xml for the GrouperWS DC or the 'isMemberOf' attribute.

So my initial difficulty is that the bean is not being loaded at startup.  I have a logger entry in the constructor that I am not seeing at runtime.

Not sure where to go from here...  Thanks for any help.

-Josh

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: Saturday, September 05, 2015 4:51 AM
To: 'Shib Users'
Subject: RE: Opinion on grouper/shib options

> There's nothing for us to do, it's more whether it works or not, so 
> I'm suggesting you just build the Java connector code, and try wiring 
> it up
with
> Spring alone and not bother with the custom schema initially.

It turns out that this "just works" (since we added the code in the dieing throws of V3.0.0 development to allow multiple attribute resolver files).  

If your data connector has dependencies it will get tricky, but that's purely because the way that the resolver handles dependencies is somewhat Byzantine not because of Spring.  Anyway, for the most part data connectors don't have dependencies.

http://tinyurl.com/ohksqs2 is a simple data connector - no surprise there and
http://tinyurl.com/pn342m2 is an attribute resolver with the same data connector's custom syntax commented out.

Enjoy !

/R

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net