Grouper Developers Forum

[Lynn Garrison <>]

Jim,
        Yes,  there are two dn

dn: cn=llg5,ou=groups,dc=psu,dc=edu   - no uid 
dn: uid=llg5,dc=psu,dc=edu

On Feb 15, 2012, at 12:33 PM, Jim Fox wrote:

> 
> 
> Is it possible that an ldap subtree search for (cn=llg5) with base
> of 'dc=psu,dc=edu' returns two records, one of which does not include
> a 'uid' attribute?
> 
> Jim
> 
> 
> On Wed, 15 Feb 2012, Lynn Garrison wrote:
> 
>> Date: Wed, 15 Feb 2012 06:16:17 -0800
>> From: Lynn Garrison 
>> <>
>> To: Jim Fox 
>> <>
>> Cc: James Vuccolo 
>> <>,
>>  Tom Zeller 
>> <>,
>>    Grouper Dev 
>> <>
>> Subject: Re: [grouper-dev] grouper 2.1.0
>> Jim, Tom,
>>      I have good news and not so good news.   I have been able to 
>> reproduce the problem in gsh.   Using the SubjectFinder.findAll command in 
>> gsh, I get the same error.   When I changed the search definition in  the 
>> sources file to  filter on uid instead of cn and  removed the 
>> firstlastfilter of sn, I was able to execute the SubjectFinder.findAll in 
>> gsh.  I rebuilt the ui and I was able to find a subject.
>> 
>> Here is a snippet from the sources.xml file that worked
>> 
>> <search>
>>      <searchType>search</searchType>
>>        <param>
>>           <param-name>filter</param-name>
>>           <param-value>
>>                (cn=%TERM%)
>>           </param-value>
>>       </param>
>>        <param>
>>           <param-name>firstlastfilter</param-name>
>>           <param-value>
>>               (sn=%TERM%)
>>           </param-value>
>>       </param>
>>       <param>
>>           <param-name>scope</param-name>
>>           <param-value>SUBTREE_SCOPE</param-value>
>>       </param>
>>        <param>
>>           <param-name>base</param-name>
>>           <param-value>dc=psu,dc=edu</param-value>
>>       </param>
>>   </search>
>> 
>>      The sources.xml file that I have been using with grouper for the last 
>> two years of testing has always had the above search.  I must have run 
>> into this problem before but didn't remember the details.   I turned on 
>> subject api debug and ran the SubjectFinder.findAll command in gsh before 
>> I updated the sources file.   I am attaching the error log.  As we get 
>> closer to a production release it would be nice to be able to activate the 
>> cn/sn filter.
>> 
>> 
>> 
>> 

Lynn