<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">One more question if I may…</div><div class=""><br class=""></div><div class="">I added a couple of lines to the config following this example:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 10px; font-family: Monaco;" class="">+|edu:berkeley:*|test.opendj.groups| addMember, removeMember, renameGroup,  removePrivilege, addPrivilege, deleteGroup, updateGroup,  createGroup, fullSyncPrivilege, fullSync |json</div><div style="margin: 0px; font-size: 10px; font-family: Monaco;" class="">-|edu:berkeley:*:includes|test.opendj.groups| addMember, removeMember, renameGroup,  removePrivilege, addPrivilege, deleteGroup, updateGroup,  createGroup, fullSyncPrivilege, fullSync |json</div></div><div class=""><br class=""></div><div class="">A group like "edu:berkeley:app:calnet:campus-community:campus-community-test_includes” matches on the include tree with level 3, and not the exclude tree which has a level -1.</div><div class=""><br class=""></div><div class="">This does exclude it:</div><div class=""><div style="margin: 0px; font-size: 10px; font-family: Monaco;" class="">-|edu:berkeley:app:calnet:campus-community:campus-community-test_includes|test.opendj.groups| addMember, removeMember, renameGroup,  removePrivilege, addPrivilege, deleteGroup, updateGroup,  createGroup, fullSyncPrivilege, fullSync |json</div></div><div class=""><br class=""></div><div class="">What needs to be changed in the first exclude line above?</div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Jeff</div><br class=""><div><blockquote type="cite" class=""><div class="">On Jul 15, 2015, at 7:22 AM, Rahul Doshi <<a href="mailto:rrdoshi@cmu.edu" class="">rrdoshi@cmu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">

<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" class="">

<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif;" class="">
<div class="">
<div class="">Hello,</div>
<div class=""><br class="">
</div>
<div class="">I have committed to git repository new version of grouperDispatcher that has capability to exclude groups from synching.   Example you could configure something like below which would synch everything under Apps tree except for groups ending with includes.</div>
<div class=""><br class="">
</div>
<div class="">+|Apps:*</div>
<div class="">-|Apps:*:Includes</div>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<div class="">Rahul</div>
</div>
</div>

_______________________________________________<br class="">Identity-services-gap mailing list<br class=""><a href="mailto:Identity-services-gap@lists.andrew.cmu.edu" class="">Identity-services-gap@lists.andrew.cmu.edu</a><br class="">https://lists.andrew.cmu.edu/mailman/listinfo/identity-services-gap<br class=""></div></blockquote></div><br class=""></body></html>