Grouper Users - Open Discussion List

[Richard James <>]

Hi All,

We have recently started testing the provisioning of grouper groups into our 
test Active directory using ldappc (we will move towards using ldappcng once 
we have got ldappc working correctly). We have managed to load a number of 
groups into the active directory but when it comes to assigning members to 
these groups we are coming across a few issues. 

I have configured our ldappc.xml file in line with the example active 
directory configuration which is documented here, 
https://spaces.internet2.edu/display/GrouperWG/LDAPPC. Initially I commented 
out any memberships config, as per the guidance, but on trying to provision 
memberships, I got the error attached in nomembershipconfig.txt. There is 
definitely a member within the group we are trying to provision, so I'm not 
sure why this message is being returned. 

I have then tried to add the memberships section into the config file, this 
time it recognises that there is a member of the group and locates the user 
with the correct path of the AD, but returns an attribute conversion error on 
attempting to provision the membership. (membershipconfig.txt).

Unfortunately our experience of provisioning items into an ldap directory is 
very limited. The fact that we are able to create the groups in the active 
directory is very promising, but the assigning of members is leaving us a 
little baffled at the moment, so any pointers/guidance would be very much 
appreciated. 

Many thanks in advance

Richard James
ISS Middleware Team
Newcastle University


2010-08-02 16:07:22,584: [main] ERROR Ldappc.run(283) - Grouper Provision 
Failed
edu.internet2.middleware.ldappc.exception.ConfigurationException: Member 
groups list attribute is null
        at 
edu.internet2.middleware.ldappc.Ldappc.addSubjectDnSet(Ldappc.java:962)
        at 
edu.internet2.middleware.ldappc.Ldappc.buildSourceSubjectDnSet(Ldappc.java:926)
        at 
edu.internet2.middleware.ldappc.Ldappc.provisionMemberships(Ldappc.java:591)
        at edu.internet2.middleware.ldappc.Ldappc.provision(Ldappc.java:383)
        at edu.internet2.middleware.ldappc.Ldappc.run(Ldappc.java:253)
        at edu.internet2.middleware.ldappc.Ldappc.main(Ldappc.java:208)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at 
edu.internet2.middleware.grouper.app.gsh.GrouperShell.handleSpecialCase(GrouperShell.java:188)
        at 
edu.internet2.middleware.grouper.app.gsh.GrouperShell.main(GrouperShell.java:128)
        at 
edu.internet2.middleware.grouper.app.gsh.GrouperShellWrapper.main(GrouperShellWrapper.java:16)
2010-08-02 16:08:38,418: [main] ERROR Ldappc.updateSubject(875) - An error 
occurred
javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 - 
00000057: LdapErr: DSID-0C090B7C, comment: Error in attribute conversion 
operation, data 0, v1db0]; remaining name 
'CN=stmiddleware,CN=Users,dc=testcampus,dc=ncl,dc=ac,dc=uk'
        at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3062)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2987)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2794)
        at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1455)
        at 
com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(ComponentDirContext.java:255)
        at 
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:172)
        at 
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:161)
        at 
edu.vt.middleware.ldap.AbstractLdap.modifyAttributes(AbstractLdap.java:836)
        at edu.vt.middleware.ldap.Ldap.modifyAttributes(Ldap.java:665)
        at 
edu.internet2.middleware.ldappc.synchronize.StringMembershipSynchronizer.commit(StringMembershipSynchronizer.java:284)
        at 
edu.internet2.middleware.ldappc.synchronize.StringMembershipSynchronizer.synchronize(StringMembershipSynchronizer.java:139)
        at 
edu.internet2.middleware.ldappc.Ldappc.updateSubject(Ldappc.java:872)
        at 
edu.internet2.middleware.ldappc.Ldappc.performActualMembershipUpdates(Ldappc.java:827)
        at 
edu.internet2.middleware.ldappc.Ldappc.provisionMemberships(Ldappc.java:602)
        at edu.internet2.middleware.ldappc.Ldappc.provision(Ldappc.java:383)
        at edu.internet2.middleware.ldappc.Ldappc.run(Ldappc.java:253)
        at edu.internet2.middleware.ldappc.Ldappc.main(Ldappc.java:208)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at 
edu.internet2.middleware.grouper.app.gsh.GrouperShell.handleSpecialCase(GrouperShell.java:188)
        at 
edu.internet2.middleware.grouper.app.gsh.GrouperShell.main(GrouperShell.java:128)
        at 
edu.internet2.middleware.grouper.app.gsh.GrouperShellWrapper.main(GrouperShellWrapper.java:16)