Grouper Users - Open Discussion List

[Shilen Patel <>]

On Nov 23, 2009, at 8:49 AM, Mirko Tasler wrote:

> Hi,
>
> the Bad Membership Finder Utility creates a GSH script which does the
> following tasks (here, for a group):
>  - remove all members
>  - revoke all privileges
>  - SQL: delete from grouper_memberships where ...  
> mship_type='effective'
>  - SQL: delete from grouper_memberships where ...  
> mship_type='composite'
>  - re-adding all members
>  - re-granting privileges
> This (and also the Finder Utility run itself) is really, really  
> slow. Is
> it possible to do this (or at least the deletion part) in pure SQL  
> or is
> there even another, faster way?


What version of Grouper are you running and how many groups do you  
have with bad memberships and how many memberships do those groups  
have?  I'm wondering how slow this is for you and if it's unusually  
slow then I'm wondering why.

If it's slow because you're missing an index or your database isn't  
tuned, then maybe fixing that will solve the issue.  However, if it's  
slow because the bad group has a million memberships, then we can try  
to figure out what's wrong with the memberships and fix it another way.


> Also we've encountered some groups whose members (always subgroups)
> cannot be deleted by UI, GSH or WS,

Do your logs show an error?  Are all the subjects of the member group  
resolvable?


> and some groups which cannot be
> added as members to certain other groups for reasons unknown -  
> trying to
> do so leads to GSH / UI / WS hanging apparently indefenitely. I'm
> suspecting our heavily usage of groups as member of groups (as  
> member of
> groups as member of groups as member of...) and am wondering if  
> someone
> had similar problems? How did you solve them?


I'm wondering if it's hanging or if it's just adding memberships  
really, really slowly or if there are just a lot of effective  
memberships being created.  When you add these groups as members of  
other groups (and notice the hanging behavior), how many effective  
memberships should that be creating?  Around 10, 100, 1000, or 10000,  
etc?

Thanks!

-- Shilen