Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2013-11-16

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
07:39 SteveF joined #openam
09:59 roysjosh joined #openam
10:41 asyd anythings to do to speedup ssoadm by chance?
10:47 balo That's a tough question. I don't think so. Speed is a feature :) Maybe if you file a jira issue somebody will look into it.
10:55 asyd :)
11:09 jjpp asyd: most of the time spent in ssoadm tends to go to launch the java vm. so.. have you tried batch mode? :)
11:11 jjpp (there are or were some weirdnesses with that, of course. it seems that creating something and then modifying it in the next step will fail quite often. so, our install/upgrade scripts collect things to different batches and run them sequentially..)
11:20 ludovicp joined #openam
11:42 asyd raaaa
11:43 asyd , are now escaped so i can't specify ou=Employees,ou=People,<basedn>
11:59 aldaris joined #openam
12:00 asyd what is the best way to send group membership in saml assertion? add memberOf=memberOf attribute? there is no other way?
12:00 asyd to send only the group name, for example
12:05 aldaris joined #openam
12:07 asyd grr can't have ismemberof
12:09 aldaris ssoamd won't get much faster than that
12:09 asyd ok
12:10 aldaris if you run into create-update issues, then those are good candidates for JIRA issues, most of the time the notification just doesn't really work locally
12:10 aldaris there is a troubleshooting section in the docs though if you run ssoadm on a VM, that could speed it up
12:11 aldaris with OpenDJ you can use isMemberOf, otherwise it may be more challenging
12:11 asyd ah nice! can you help me for isMemberOf? i added a group, openam see that my user is in the group. I also added isMemberOf is the list of ldap attributes to fetch, and then a mapping isMemberOf=ismemberof but still can't see this
12:11 asyd ok
12:16 aldaris which directory server do you use?
12:16 asyd opendj, but i just restart openam it's work now, maybe a cache issue
12:17 asyd since it's an operationnal attribute
12:17 aldaris yeah..
12:17 aldaris this also means that if you update the group membership, then that won't be realized by OpenAM either. Since you update the group and not the user entry
12:18 aldaris It appears that the change of a virtual attribute's value does not trigger a psearch event
12:19 asyd yeah indeed
12:33 MegaMatt joined #openam
12:59 ludovicp joined #openam
14:36 MegaMatt joined #openam
16:04 aldaris joined #openam
16:34 SteveF joined #openam
19:22 aldaris joined #openam
21:59 aldaris joined #openam
23:08 aldaris joined #openam
23:28 ibenox joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary