Grouper Users - Open Discussion List

[Tom Zeller <>]

Scott,

I hope to have a better response for you later, but, I'm not too surprised. Certainly one might say that this behavior is sub-optimal.

Until later,

TomZ

On Thu, Apr 2, 2009 at 6:05 PM, Scott Koranda <> wrote:

Hi,

I am running ldappc from Grouper API 1.4.1 with this command
line:

./bin/gsh.sh -ldappc -subject GrouperSystem -groups -memberships -interval 60 -configManager /opt/grouper/ldappc/grouper/conf/ldappc.xml

This instance has been running since March 18 (today is April
2) and has accumulated 651 minutes and 48 seconds of CPU time
(as shown by 'ps').

Before making any changes in the state of Grouper my entry in
the LDAP server had the following values for the isMemberOf
attribute:

isMemberOf: Communities:LVC:LSC:CompComm:AuthProject:AuthProjectGroupMembers
isMemberOf: Communities:LVC:LSC:CompComm:CompCommGroupMembers
isMemberOf: Communities:LVC:LSC:MOU:UWM:UWMGroupManagers
isMemberOf: Communities:LVC:LSC:LSCGroupMembers
isMemberOf: Communities:LVC:LSC:MOU:UWM:UWMGroupMembers
isMemberOf: Communities:LVC:LVCGroupMembers
isMemberOf: Communities:LVC:LIGOLab:MIT:MITGroupManagers
isMemberOf: Communities:LVC:LIGOLab:LHO:LHOGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:CIT:CITGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:LIGOLabGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:LLO:LLOGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:LHO:LHOGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:MIT:MITGroupManagers

I then added myself to a new group in Grouper. After about 5
minutes I then queried the LDAP server and saw that the
isMemberOf attrbitue had only a single value--the name of the
group to which I just added myself:

isMemberOf: Communities:LVC:LSC:MOU:UWM:UWMSupportStaff

This persisted for about 5 minutes. Eventually I found the
following values:

isMemberOf: Communities:LVC:LSC:MOU:UWM:UWMSupportStaff
isMemberOf: Communities:LVC:LIGOLab:LHO:LHOGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:LIGOLabGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:UWM:UWMGroupManagers
isMemberOf: Communities:LVC:LIGOLab:MIT:MITGroupManagers
isMemberOf: Communities:LVC:LSC:LSCGroupMembers
isMemberOf: Communities:LVC:LVCGroupMembers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:LLO:LLOGroupManagers
isMemberOf: Communities:LVC:LSC:CompComm:AuthProject:AuthProjectGroupMembers
isMemberOf: Communities:LVC:LSC:MOU:UWM:UWMGroupMembers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:LHO:LHOGroupManagers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:MIT:MITGroupManagers
isMemberOf: Communities:LVC:LSC:CompComm:CompCommGroupMembers
isMemberOf: Communities:LVC:LSC:MOU:LIGOLab:CIT:CITGroupManagers

So after 15 minutes or so the isMemberOf attribute did properly
reflect the state of Grouper, but there was a substantial
amount of time during which the value did not reflect the
state of Grouper.

Is this to be expected?

Is there anything I can tune to make the synchronization
faster?

Thanks,

Scott