Grouper Developers Forum

[James Vuccolo <>]

# This is the configuration file for vt-ldap.
# See http://code.google.com/p/vt-middleware/wiki/vtldapProperties

edu.vt.middleware.ldap.ldapUrl=ldap://cprdev2.iam.psu.edu:389
edu.vt.middleware.ldap.searchScope=SUBTREE

# All subordinate objects will be deleted during tests !
edu.vt.middleware.ldap.baseDn=dc=psu,dc=edu

# authn if simple
edu.vt.middleware.ldap.serviceUser=cn=manager,dc=psu,dc=edu
edu.vt.middleware.ldap.serviceCredential=a password goes here
edu.vt.middleware.ldap.authtype=simple

# encryption
edu.vt.middleware.ldap.ssl=false
edu.vt.middleware.ldap.tls=false

# pooling options
edu.vt.middleware.ldap.pool.minPoolSize = 2
edu.vt.middleware.ldap.pool.maxPoolSize = 5

# paged results
edu.vt.middleware.ldap.pagedResultsSize=0

# authn for sasl external (certificates)
# edu.vt.middleware.ldap.authtype=EXTERNAL
# edu.vt.middleware.ldap.tls=true
# edu.vt.middleware.ldap.serviceUser=cn=admin.example.edu
# these to use PEM format cert and key
# pemCaFile=/path/to/ca.pem
# pemCertFile=/path/to/cert.pem
# pemKeyFile=/path/to/key.pem

# The following properties are not necessary for the Grouper UI or WS.

# The QuotedDnResultHandler removes quotes from DNs of the form 
"CN=quoted/name",DC=edu.
# The FqdnSearchResultHandler makes sure that all ldap dns are fully 
qualified.
edu.vt.middleware.ldap.searchResultHandlers=edu.internet2.middleware.psp.ldap.QuotedDnResultHandler,edu.vt.middleware.ldap.handler.FqdnSearchResultHandler

# handle Active Directory groups with a large (>1500) number of members
# see https://bugs.internet2.edu/jira/browse/GRP-335
# see http://code.google.com/p/vt-middleware/wiki/vtldapAD#Range_Attributes
# 
edu.vt.middleware.ldap.searchResultHandlers=edu.internet2.middleware.ldappc.util.QuotedDnResultHandler,edu.vt.middleware.ldap.handler.FqdnSearchResultHandler,edu.internet2.middleware.ldappc.util.RangeSearchResultHandler

# Define the group object class for the target ldap directory.
# OpenLDAP, RedHat, 389, ApacheDS, etc.
edu.internet2.middleware.psp.groupObjectClass=groupOfNames
# Active Directory
# edu.internet2.middleware.psp.groupObjectClass=group

# The base DN for groups.
edu.internet2.middleware.psp.groupsBaseDn=ou=groupstest,dc=psu,dc=edu

# The base DN for people.
edu.internet2.middleware.psp.peopleBaseDn=dc=psu,dc=edu

# The base Grouper stem to be provisioned.
edu.internet2.middleware.psp.baseStem=ldaptest

# The ldap DN structure may be either flat or bushy.
# In a flat structure all groups are provisioned under a single base DN 
(container ID).
# A flat group's ldap RDN is its Grouper name or displayName.
edu.internet2.middleware.psp.structure=flat
edu.internet2.middleware.psp.cnSourceAttributeID=name

# In a bushy structure groups are provisioned hierarchically, with stems as 
branches in the tree.
# A bushy group's RDN is its Grouper extension or displayExtension.
# edu.internet2.middleware.psp.structure=bushy
# edu.internet2.middleware.psp.cnSourceAttributeID=extension

On Feb 14, 2012, at 1:17 PM, Jim Fox wrote:

> 
> Could you send the 'ldap.properties' file as well?
> 
> Jim
> 
> 
> On Tue, 14 Feb 2012, Lynn Garrison wrote:
> 
>> Date: Tue, 14 Feb 2012 10:14:26 -0800
>> From: Lynn Garrison 
>> <>
>> To: Tom Zeller 
>> <>
>> Cc: Grouper Dev 
>> <>
>> Subject: Re: [grouper-dev] grouper 2.1.0
>> Tom,
>>         I made a few modifications to the file I changes the filter 
>> parameters to remove the object class
>> On Feb 14, 2012, at 12:47 PM, Tom Zeller wrote:
>> > Could you reply with sources.xml attached, please ?
>> >
>> > TomZ
>> >
>> > On Tue, Feb 14, 2012 at 11:31 AM, Lynn Garrison 
>> > <>
>> >  wrote:
>> >> I installed the pre release of grouper 2.1.0 using the new ldap source
>> >> adapter.  I can find subject gsh but I am having problems searching for
>> >> subjects in the UI.
>> >>
>> >> I get the following error.
>> >>
>> >>
>> >> Error:
>> >>
>> >> Unable to connect to an entity database.
>> >> If you continue to encounter errors, please contact technical support.
>> >>
>> >>
>> >>
>> >> Information for the grouper_error.log
>> >>
>> >> Caused by: edu.internet2.middleware.subject.SourceUnavailableException:
>> >> null, source: ldap, sql: null
>> >> at
>> >> edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:399)
>> >> at
>> >> edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchPage(LdapSourceAdapter.java:344)
>> >> at
>> >> edu.internet2.middleware.grouper.subj.SourcesXmlResolver$6.callLogic(SourcesXmlResolver.java:834)
>> >> ... 51 more
>> >> Caused by: java.lang.NullPointerException
>> >> at
>> >> edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:387)
>> >> ... 53 more
>> >>
>> >> 2012-02-14 12:21:15,929: [TP-Processor8] ERROR
>> >> NavExceptionHelper.getMessage(92) - < llg5
>> >> EB50391179C2FAA62334B0449A1771CA-0005 c9f7fb7a224e479a822d681d520f729d 
>> >> llg5
>> >> ldap > - Missing nav key: Unable to connect to an entity database.
>> >> 2012-02-14 12:23:16,048: [TP-Processor9] ERROR
>> >> LdapSourceAdapter.createSubject(425) - < llg5
>> >> EB50391179C2FAA62334B0449A1771CA-0007 c9f7fb7a224e479a822d681d520f729d 
>> >> llg5
>> >> ldap > - No value for LDAP attribute "uid". It is Grouper attribute
>> >> "SubjectID".
>> >> 2012-02-14 12:23:16,050: [TP-Processor9] ERROR
>> >> GrouperCapableAction.execute(298) - < llg5
>> >> EB50391179C2FAA62334B0449A1771CA-0007 c9f7fb7a224e479a822d681d520f729d 
>> >> llg5
>> >> ldap > - edu.internet2.middleware.subject.SourceUnavailableException:
>> >> Exception with source: ldap, on query: 'llg5'
>> >> at
>> >> edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPage(SourcesXmlResolver.java:642)
>> >> at
>> >> edu.internet2.middleware.grouper.subj.CachingResolver.findPage(CachingResolver.java:483)
>> >> at
>> >> edu.internet2.middleware.grouper.subj.ValidatingResolver.findPage(ValidatingResolver.java:232)
>> >> at
>> >> edu.internet2.middleware.grouper.SubjectFinder.findPage(SubjectFinder.java:1298)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.actions.DoSearchSubjectsAction.grouperExecute(DoSearchSubjectsAction.java:185)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction$1.callback(GrouperCapableAction.java:217)
>> >> at
>> >> edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO$1.callback(Hib3TransactionDAO.java:51)
>> >> at
>> >> edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:500)
>> >> at
>> >> edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO.transactionCallback(Hib3TransactionDAO.java:41)
>> >> at
>> >> edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:72)
>> >> at
>> >> edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:91)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.grouperTransactionExecute(GrouperCapableAction.java:214)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.execute(GrouperCapableAction.java:279)
>> >> at
>> >> org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:424)
>> >> at
>> >> org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:226)
>> >> at 
>> >> org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)
>> >> at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)
>> >> at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
>> >> at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.LoginCheckFilter$1.callback(LoginCheckFilter.java:173)
>> >> at
>> >> edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:645)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.LoginCheckFilter.doFilter(LoginCheckFilter.java:168)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.ErrorFilter.doFilter(ErrorFilter.java:132)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>> >> at
>> >> edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:804)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>> >> at
>> >> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>> >> at
>> >> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
>> >> at
>> >> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>> >> at
>> >> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
>> >> at
>> >> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
>> >> at
>> >> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>> >> at
>> >> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>> >> at
>> >> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
>> >> at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
>> >> at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
>> >> at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776)
>> >> at
>> >> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705)
>> >> at
>> >> org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898)
>> >> at
>> >> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
>> >> at java.lang.Thread.run(Thread.java:662)
>> >> Caused by: edu.internet2.middleware.subject.SourceUnavailableException:
>> >> null, source: ldap, sql: null
>> >> at
>> >> edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:399)
>> >> at
>> >> edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchPage(LdapSourceAdapter.java:344)
>> >> at
>> >> edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPage(SourcesXmlResolver.java:608)
>> >> ... 45 more
>> >> Caused by: java.lang.NullPointerException
>> >> at
>> >> edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:387)
>> >> ... 47 more
>> >>
>> >> 2012-02-14 12:23:16,050: [TP-Processor9] ERROR
>> >> NavExceptionHelper.getMessage(92) - < llg5
>> >> EB50391179C2FAA62334B0449A1771CA-0007 c9f7fb7a224e479a822d681d520f729d 
>> >> llg5
>> >> ldap > - Missing nav key: Unable to connect to an entity database.
>> >>
>> >>
>> >> Any suggestions?
>> >>
>> >> Thanks
>> >> Lynn
>> >>
>> >>
>> Lynn

--
James "Jimmy" Vuccolo, 

Technical Manager, Identity and Access Management
The Pennsylvania State University
215B Computer Building, University Park, PA 16802
Office: 814-865-5635 
http://www.personal.psu.edu/jvuccolo/