Grouper Developers Forum

[Arnaud Deman <>]

Hi everyone,

I have got a problem with ldappc when restarting it after a crash, when 
the people branch is not completely provisionned.
When I restart ldappc, if a person has only a part of its groups in the 
attribute isMemberOf, then there is a swap between these groups and the 
missing ones.

For instance, the user F08001ph is member of the  groups :
      is a member of : Groupesco:sarapis:local:sarapis_GIP_RECIA
      is an indirect member of : Groupesco:sarapis:local:sarapis_CLAUDE 
DE FRANCE_0410017W
      is an indirect member of : 
Groupesco:sarapis:local:sarapis_LEONARD DE VINCI_0370001A
      is a member of : Groupesco:sarapis:central

The content of the attribute isMemeberOf, for the ldap entry before 
running ldappc is:
      isMemberOf: esco:sarapis:local:sarapis_LEONARD DE VINCI_0370001A
      isMemberOf: esco:sarapis:local:sarapis_GIP_RECIA

And the result of the run of ldappc is:
     isMemberOf: esco:sarapis:central
     isMemberOf: esco:sarapis:local:sarapis_CLAUDE DE FRANCE_0410017W

The content of the temporary file used by the process is :
     uid=F08001ph,ou=people,dc=esco-centre,dc=fr     2       
esco:sarapis:central
     uid=F08001ph,ou=people,dc=esco-centre,dc=fr     2       
esco:sarapis:local:sarapis_CLAUDE DE FRANCE_0410017W

I think the "2" which mean "Replace Attribute" in this file should be 
"1" (Add attribute). I would say it is related to the method 
AttributeModifier.getModifications() but I can't go further because I 
dont understand very well the method. In fact, I even don't understand 
when a Replace operation should be used as we are working on 
multi-valued attributes.

I have done this test with ldappc in the grouper 1.4.1 package but I 
will have also to fixe it for the 1.2.1 version as we use it in production.



Thanks for your help,
Arnaud.










--

Arnaud Deman
GIP RECIA
Parc d'activités les Aulnaies
151 rue de la Juine - 45160 OLIVET
Tel : 02 38 42 14 63