Grouper Users - Open Discussion List

[Baron Fujimoto <>]

Hello,

After numerous trials and tribulations, I've managed to finally stand up
a non-quickstart version of grouper/grouper-ui that I can interact with.

I'm still running into problems though and am perhaps confused about some
fundamental questions I haven't been able to find answers to in the
Grouper Wiki.

I suppose my current primary question is, how do you seed grouper with
basic person-type entities? I assumed, based on what I could glean from
the documentation, that could be done by connecting to a subject source
in the sources.xml conf file[1]. I managed to get our instance of grouper
to talk to our LDAP continaing our users, and if I, say, search for
myself, in the Grouper UI, it returns a result displayed as the value of
the LDAP cn attribute.  However, if I click on that result, I receive the
following error messages:

Error: Subject [baron] is unresolvable i.e. unavailable from the registered 
source [LDAP example].

There was an unexpected error retrieving the requested entity as a member. 
The error has been logged and the administrator notified.

In the grouper_error.log file I see

2011-02-24 10:52:38,840: [http-172.16.4.137-8443-4] ERROR 
PopulateSubjectSummaryAction.grouperExecute(351) - < GrouperSystem 
CB6B4125EB93662BF9BCEBA59AF94347-0009 1fde40e57a094fd2add86e96ffda0cab 
GrouperSystem g:isa > - 
edu.internet2.middleware.subject.SubjectNotFoundException: No results: 
searchSubject filter:(& (cn=%TERM%) (objectclass=uhEduPerson)) searchValue: 
baron
2011-02-24 10:52:38,842: [http-172.16.4.137-8443-4] ERROR 
PopulateSubjectSummaryAction.grouperExecute(418) - < GrouperSystem 
CB6B4125EB93662BF9BCEBA59AF94347-0009 1fde40e57a094fd2add86e96ffda0cab 
GrouperSystem g:isa > - 
edu.internet2.middleware.grouper.exception.MemberNotFoundException: 
Unresolvable subject is also not a Member

Any assistance or pointers to the appropriate documentation would be
greatly appreciated.  It's possible I'm completely on the wrong track
here, which would also be good to know.

[1] excerpt of my source.xml file for connecting to our LDAP:

  <source 
adapterClass="edu.internet2.middleware.grouper.subj.GrouperJndiSourceAdapter">
    <id>LDAP example</id>
    <name>UH LDAP</name>
    <type>person</type>
    <init-param>
      <param-name>INITIAL_CONTEXT_FACTORY</param-name>
      <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value>
    </init-param>
    <init-param>
      <param-name>PROVIDER_URL</param-name>
      <param-value>ldaps://ourLDAPhost:636</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_AUTHENTICATION</param-name>
      <param-value>simple</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_PRINCIPAL</param-name>
      <param-value>cn=ourPrincipal,dc=hawaii,dc=edu</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_CREDENTIALS</param-name>
      <param-value>**********</param-value>
    </init-param>
     <init-param>
      <param-name>SubjectID_AttributeType</param-name>
      <param-value>uid</param-value>
    </init-param>
    <init-param>
      <param-name>Name_AttributeType</param-name>
      <param-value>cn</param-value>
    </init-param>
    <init-param>
      <param-name>Description_AttributeType</param-name>
      <param-value>cn</param-value>
    </init-param>
    
    /// Scope Values can be: OBJECT_SCOPE, ONELEVEL_SCOPE, SUBTREE_SCOPE 
    /// For filter use 

    <search>
        <searchType>searchSubject</searchType>
        <param>
            <param-name>filter</param-name>
            <param-value>
                (&amp; (cn=%TERM%) (objectclass=uhEduPerson))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>
                SUBTREE_SCOPE            
            </param-value>
        </param>
        <param>
            <param-name>base</param-name>
            <param-value>
                ou=people,dc=hawaii,dc=edu
            </param-value>
        </param>
         
    </search>
    <search>
        <searchType>searchSubjectByIdentifier</searchType>
        <param>
            <param-name>filter</param-name>
            <param-value>
                (&amp; (uid=%TERM%) (objectclass=uhEduPerson))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>
                SUBTREE_SCOPE            
            </param-value>
        </param>
        <param>
            <param-name>base</param-name>
            <param-value>
                ou=people,dc=hawaii,dc=edu
            </param-value>
        </param>
    </search>
    <search>
        <searchType>search</searchType>
        <param>
            <param-name>filter</param-name>
            <param-value>
                (&amp; (|(uid=%TERM%)(cn=%TERM%)) (objectclass=uhEduPerson))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>
                SUBTREE_SCOPE
            </param-value>
        </param>
        <param>
            <param-name>base</param-name>
            <param-value>
                ou=people,dc=hawaii,dc=edu
            </param-value>
        </param>

    </search>
    
    ///Attributes you would like to display when doing a search 
    <attribute>uid</attribute>
    <attribute>cn</attribute>
   
  </source>