Grouper Users - Open Discussion List

[Lynn Garrison <>]

We have encountered several errors in a test load of our faculty/staff data into Grouper.   We are using LDAP as our subject source.  The parameters are defined as

<init-param>

      <param-name>SubjectID_AttributeType</param-name>

      <param-value>uid</param-value>

    </init-param>

    <init-param>

      <param-name>Name_AttributeType</param-name>

      <param-value>cn</param-value>

    </init-param>

    <init-param>

      <param-name>Description_AttributeType</param-name>

      <param-value>eduPersonPrimaryAffiliation</param-value>

    </init-param>

Search is defined as

<search>

        <searchType>searchSubject</searchType>

        <param>

            <param-name>filter</param-name>

            <param-value>

                (&amp; (uid=%TERM%) (objectclass=eduPerson))

            </param-value>

        </param>

        <param>

            <param-name>scope</param-name>

            <param-value>

                SUBTREE_SCOPE

            </param-value>

        </param>

        <param>

            <param-name>base</param-name>

            <param-value>

                dc=psu,dc=edu

            </param-value>

        </param>

In a small number of cases, the ldap entry for a user doesn't have a cn entry due to a confidentiality hold.   We also have a few cases where the ldap entry doesn't have a eduPersonPrimaryAffiliation entry.   

An addMember result in one of the following errors.  

2011-02-24 18:15:34,523: [main] ERROR JNDISourceAdapter.createSubject(236) -  - The LDAP attribute "eduPersonPrimaryAffiliation" does not have a value. It is being used as the Grouper special attribute "description".

2011-02-24 18:18:42,430: [main] ERROR JNDISourceAdapter.createSubject(227) -  - The LDAP attribute "cn" does not have a value. It is being used as the Grouper special attribute "name".

A findSubject search in the grouper shell fails with this error,  Cant find subject by id or identifier.  

Is there any way to make the name and description field optional - use the data if it exists, but don't generate an error if the data doesn't exist?

Lynn Garrison

IAM Technical Architect Group

215A Computer Building

University Park, PA 16802

(814) 865-4864