Skip to Main Content
Spotfire Ideas Portal
Status Future Consideration
Product Spotfire
Created by Guest
Created on Feb 6, 2016

Recursive Group Synchronization (sync all children groups)


This request is for recursive group sync that syncs all children groups (recursively) that belong under the explicit group that is synced. For example:
Group1
Members: User1, User2, Group2

Group2
Members: Group3, Group4

They would like to specify just Group1 in the Group Sync configuration and have Group2, Group3, and Group4 also synced.

Currently, Group2, Group3, and Group4 will only be synced if they are explicitly included via one of the current methods for group sync definition (5.X+):
-Enter explicit group DNs. For example: "CN=Finance-AP-WRITE,OU=Domain Groups,DC=na,DC=tibco,DC=com". Result: This will sync just the group Finance-AP-WRITE"
-Enter wildcard form of group name. For example: "*Spotfire*" Result: Spotfire will search the indexed list of groups on the directory server and will find all that match the specified pattern. Note: Wildcards can not be used in the same entry as a full DN. This is NOT valid "CN=*Spotfire*,OU=Domain Groups,DC=na,DC=tibco,DC=com"
-Enter container only, no DN. For example: "OU=Domain Groups,DC=na,DC=tibco,DC=com". Result: If that container is also specified in the list of context-names, the server will synchronize all groups within the container "OU=Domain Groups,DC=na,DC=tibco,DC=com"
-Enter nothing in the group list. Result: If LDAP group synchronization is enabled and no group names are specified, the server will synchronize all groups found within the configured context-names.

They want to just be able to enter the full DN of Group1 to have that and all children groups synced (Group2, Group3, and Group4)

Currently the recursive behavior of group sync only works for inheriting permissions from user members of children groups. The recursive group search does not apply to the sync of the actual groups

  • Attach files