Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Bad memberships and groups

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Bad memberships and groups

Chronological Thread 
  • From: Shilen Patel <>
  • To: Mirko Tasler <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] Bad memberships and groups
  • Date: Mon, 23 Nov 2009 14:50:46 -0500

On Nov 23, 2009, at 8:49 AM, Mirko Tasler wrote:


the Bad Membership Finder Utility creates a GSH script which does the
following tasks (here, for a group):
- remove all members
- revoke all privileges
- SQL: delete from grouper_memberships where ... mship_type='effective'
- SQL: delete from grouper_memberships where ... mship_type='composite'
- re-adding all members
- re-granting privileges
This (and also the Finder Utility run itself) is really, really slow. Is
it possible to do this (or at least the deletion part) in pure SQL or is
there even another, faster way?

What version of Grouper are you running and how many groups do you have with bad memberships and how many memberships do those groups have? I'm wondering how slow this is for you and if it's unusually slow then I'm wondering why.

If it's slow because you're missing an index or your database isn't tuned, then maybe fixing that will solve the issue. However, if it's slow because the bad group has a million memberships, then we can try to figure out what's wrong with the memberships and fix it another way.

Also we've encountered some groups whose members (always subgroups)
cannot be deleted by UI, GSH or WS,

Do your logs show an error? Are all the subjects of the member group resolvable?

and some groups which cannot be
added as members to certain other groups for reasons unknown - trying to
do so leads to GSH / UI / WS hanging apparently indefenitely. I'm
suspecting our heavily usage of groups as member of groups (as member of
groups as member of groups as member of...) and am wondering if someone
had similar problems? How did you solve them?

I'm wondering if it's hanging or if it's just adding memberships really, really slowly or if there are just a lot of effective memberships being created. When you add these groups as members of other groups (and notice the hanging behavior), how many effective memberships should that be creating? Around 10, 100, 1000, or 10000, etc?


-- Shilen

Archive powered by MHonArc 2.6.16.

Top of Page