Grouper Developers Forum

[Lynn Garrison <>]

Jim,
        I changes the search to this


<search>
       <searchType>search</searchType>
         <param>
            <param-name>filter</param-name>
            <param-value>
                 (&amp;(|(uid=%TERM%)(cn=%TERM%))(objectclass=person))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>SCOPE_ONELEVEL</param-value>
        </param>
         <param>
            <param-name>base</param-name>
            <param-value>dc=psu,dc=edu</param-value>
        </param>
    </search>


        I was able to successfully search by uid or cn both in the grouper 
shell and the ui.      

Thanks for all your help
Lynn

On Feb 15, 2012, at 12:51 PM, Jim Fox wrote:

> 
> That's the problem then.  The first result has no uid, an essential 
> attribute.  There's an assumption that returned records have the subjectId. 
>  Can you run with scope=onelevel?
> 
> Jim
> 
> 
> On Wed, 15 Feb 2012, Lynn Garrison wrote:
> 
>> Date: Wed, 15 Feb 2012 09:49:04 -0800
>> From: Lynn Garrison 
>> <>
>> To: Jim Fox 
>> <>
>> Cc: James Vuccolo 
>> <>,
>>  Tom Zeller 
>> <>,
>>    Grouper Dev 
>> <>
>> Subject: Re: [grouper-dev] grouper 2.1.0
>> Jim,
>>      Yes,  there are two dn
>> 
>> dn: cn=llg5,ou=groups,dc=psu,dc=edu   - no uid
>> dn: uid=llg5,dc=psu,dc=edu
>> 
>> On Feb 15, 2012, at 12:33 PM, Jim Fox wrote:
>> 
>>> 
>>> 
>>> Is it possible that an ldap subtree search for (cn=llg5) with base
>>> of 'dc=psu,dc=edu' returns two records, one of which does not include
>>> a 'uid' attribute?
>>> 
>>> Jim
>>> 
>>> 
>>> On Wed, 15 Feb 2012, Lynn Garrison wrote:
>>> 
>>>> Date: Wed, 15 Feb 2012 06:16:17 -0800
>>>> From: Lynn Garrison 
>>>> <>
>>>> To: Jim Fox 
>>>> <>
>>>> Cc: James Vuccolo 
>>>> <>,
>>>>  Tom Zeller 
>>>> <>,
>>>>   Grouper Dev 
>>>> <>
>>>> Subject: Re: [grouper-dev] grouper 2.1.0
>>>> Jim, Tom,
>>>>    I have good news and not so good news.   I have been able to 
>>>> reproduce the problem in gsh.   Using the SubjectFinder.findAll command 
>>>> in gsh, I get the same error.   When I changed the search definition in  
>>>> the sources file to  filter on uid instead of cn and  removed the 
>>>> firstlastfilter of sn, I was able to execute the SubjectFinder.findAll 
>>>> in gsh.  I rebuilt the ui and I was able to find a subject.
>>>> 
>>>> Here is a snippet from the sources.xml file that worked
>>>> 
>>>> <search>
>>>>     <searchType>search</searchType>
>>>>       <param>
>>>>          <param-name>filter</param-name>
>>>>          <param-value>
>>>>               (cn=%TERM%)
>>>>          </param-value>
>>>>      </param>
>>>>       <param>
>>>>          <param-name>firstlastfilter</param-name>
>>>>          <param-value>
>>>>              (sn=%TERM%)
>>>>          </param-value>
>>>>      </param>
>>>>      <param>
>>>>          <param-name>scope</param-name>
>>>>          <param-value>SUBTREE_SCOPE</param-value>
>>>>      </param>
>>>>       <param>
>>>>          <param-name>base</param-name>
>>>>          <param-value>dc=psu,dc=edu</param-value>
>>>>      </param>
>>>>  </search>
>>>> 
>>>>    The sources.xml file that I have been using with grouper for the last 
>>>> two years of testing has always had the above search.  I must have run 
>>>> into this problem before but didn't remember the details.   I turned on 
>>>> subject api debug and ran the SubjectFinder.findAll command in gsh 
>>>> before I updated the sources file.   I am attaching the error log.  As 
>>>> we get closer to a production release it would be nice to be able to 
>>>> activate the cn/sn filter.
>>>> 
>>>> 
>>>> 
>>>> 
>> 
>> Lynn
>> 
>> 
>>