Grouper Users - Open Discussion List

[Francesco Malvezzi <>]

While provisioning, ldappcng issues a error:

2012-02-20 15:17:31,737: [main] ERROR BaseSpmlProvider.execute(95) -  -
Response[status=failure,error=unsupportedOperation,errorMessages={},requestID=2012/02/20-15:17:31.730_Q85VKUDO]
java.lang.reflect.InvocationTargetException
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at
edu.internet2.middleware.ldappc.spml.provider.BaseSpmlProvider.execute(BaseSpmlProvider.java:79)
        at edu.internet2.middleware.ldappc.spml.PSP.execute(PSP.java:308)
        at 
edu.internet2.middleware.ldappc.spml.PSPDiffer.diff(PSPDiffer.java:126)
        at edu.internet2.middleware.ldappc.spml.PSP.execute(PSP.java:221)
        at edu.internet2.middleware.ldappc.spml.PSP.execute(PSP.java:260)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at
edu.internet2.middleware.ldappc.spml.provider.BaseSpmlProvider.execute(BaseSpmlProvider.java:79)
        at edu.internet2.middleware.ldappc.spml.PSPCLI.run(PSPCLI.java:176)
        at edu.internet2.middleware.ldappc.spml.PSPCLI.main(PSPCLI.java:90)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at
edu.internet2.middleware.grouper.app.gsh.GrouperShell.handleSpecialCase(GrouperShell.java:186)
        at
edu.internet2.middleware.grouper.app.gsh.GrouperShell.main(GrouperShell.java:126)
        at
edu.internet2.middleware.grouper.app.gsh.GrouperShellWrapper.main(GrouperShellWrapper.java:16)
Caused by: edu.internet2.middleware.ldappc.exception.LdappcException:
More than one schema entity found for
cn=unimore:domains:unimore:test,ou=unimoregroups,dc=unimore,dc=it
        at
edu.internet2.middleware.ldappc.spml.provider.LdapTargetProvider.getPSODefinition(LdapTargetProvider.java:791)
        at
edu.internet2.middleware.ldappc.spml.provider.LdapTargetProvider.getPSO(LdapTargetProvider.java:702)
        at
edu.internet2.middleware.ldappc.spml.provider.LdapTargetProvider.execute(LdapTargetProvider.java:453)
        ... 23 more
2012-02-20 15:17:31,743: [main] ERROR PSP.execute(322) -  -
LookupResponse[pso=<null>,status=failure,error=customError,errorMessages={Target
did not return a lookup
response.},requestID=2012/02/20-15:17:31.730_Q85VKUDO]

but calculation works fine:

<ldappc:calcResponse xmlns:ldappc='http://grouper.internet2.edu/ldappc'
status='success' requestID='2012/02/20-15:30:20.439_Q85V1EMB'>
  <ldappc:id ID='unimore:domains:unimore:test'/>
  <ldappc:pso entityName='group'>
    <psoID
ID='cn=unimore:domains:unimore:test,ou=unimoregroups,dc=unimore,dc=it'
targetID='ldap'/>
    <data>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='objectClass'>
        <dsml:value>top</dsml:value>
        <dsml:value>groupOfNames</dsml:value>
        <dsml:value>eduMember</dsml:value>
        <dsml:value>posixGroup</dsml:value>
        <dsml:value>unimoreGroup</dsml:value>
      </dsml:attr>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='cn'>
        <dsml:value>unimore:domains:unimore:test</dsml:value>
      </dsml:attr>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='description'>
        <dsml:value>Gruppo di test</dsml:value>
      </dsml:attr>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='gidNumber'>
        <dsml:value>1000</dsml:value>
      </dsml:attr>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='memberUid'>
        <dsml:value>malvezzi</dsml:value>
      </dsml:attr>
      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='hasMember'>
        <dsml:value>malvezzi</dsml:value>
      </dsml:attr>
    </data>
    <capabilityData mustUnderstand='true'
capabilityURI='urn:oasis:names:tc:SPML:2:0:reference'>
      <spmlref:reference xmlns='urn:oasis:names:tc:SPML:2:0'
xmlns:spmlref='urn:oasis:names:tc:SPML:2:0:reference'
typeOfReference='member'>
        <spmlref:toPsoID ID='uid=malvezzi,ou=people,dc=unimore,dc=it'
targetID='ldap'/>
      </spmlref:reference>
      </spmlref:reference>
    </capabilityData>
  </ldappc:pso>
</ldappc:calcResponse>

On the other hand, the error doesn't stop ldappcng from writing to the
ldap. It actually writes the group, but stops before updating the
'isMemberOf' field of the members.

Could it be a objectClass schema issue?

The groups have as objectClass:

dn: cn=unimore:domains:unimore:test,ou=unimoregroups,dc=unimore,dc=it
gidNumber: 1000
memberUid: malvezzi
objectClass: eduMember
objectClass: groupOfNames
objectClass: posixGroup
objectClass: top
objectClass: unimoreGroup
description: Gruppo di test
hasMember: malvezzi
member: uid=malvezzi,ou=people,dc=unimore,dc=it
cn: unimore:domains:unimore:test

where unimoreGroup is just a trick to include both groupOfNames and
posixGroup:

olcObjectClasses: {3}( 1.3.6.1.4.1.13331.9.9.0.5.2.5 NAME
'unimoreGroup'SUP (
 posixGroup $ groupOfNames ) STRUCTURAL )

Which informations do you need to pint me to the right direction?

Thank you,

Francesco