Grouper Users - Open Discussion List

[Tom Zeller <>]

(mobile) Find out why more than one cn=unimiore... or whatever ldap entry is being found, probably because two objects with objectclass edumember have the same rdn, under different identifier container ids (base dns for people and for groups).

Does this help ? What are the <identifyingAttribute/>s in your configuration, ldappcng.xml ?

Oh, and, this definitely us not standard spmlv2, it's something more like zml.

TomZ

On Monday, February 20, 2012, Francesco Malvezzi wrote:

While provisioning, ldappcng issues a error:

2012-02-20 15:17:31,737: [main] ERROR BaseSpmlProvider.execute(95) -  -
Response[status=failure,error=unsupportedOperation,errorMessages={},requestID=2012/02/20-15:17:31.730_Q85VKUDO]
java.lang.reflect.InvocationTargetException
       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
       at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
       at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
       at java.lang.reflect.Method.invoke(Method.java:597)
       at
edu.internet2.middleware.ldappc.spml.provider.BaseSpmlProvider.execute(BaseSpmlProvider.java:79)
       at edu.internet2.middleware.ldappc.spml.PSP.execute(PSP.java:308)
       at edu.internet2.middleware.ldappc.spml.PSPDiffer.diff(PSPDiffer.java:126)
       at edu.internet2.middleware.ldappc.spml.PSP.execute(PSP.java:221)
       at edu.internet2.middleware.ldappc.spml.PSP.execute(PSP.java:260)
       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
       at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
       at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
       at java.lang.reflect.Method.invoke(Method.java:597)
       at
edu.internet2.middleware.ldappc.spml.provider.BaseSpmlProvider.execute(BaseSpmlProvider.java:79)
       at edu.internet2.middleware.ldappc.spml.PSPCLI.run(PSPCLI.java:176)
       at edu.internet2.middleware.ldappc.spml.PSPCLI.main(PSPCLI.java:90)
       at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
       at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
       at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
       at java.lang.reflect.Method.invoke(Method.java:597)
       at
edu.internet2.middleware.grouper.app.gsh.GrouperShell.handleSpecialCase(GrouperShell.java:186)
       at
edu.internet2.middleware.grouper.app.gsh.GrouperShell.main(GrouperShell.java:126)
       at
edu.internet2.middleware.grouper.app.gsh.GrouperShellWrapper.main(GrouperShellWrapper.java:16)
Caused by: edu.internet2.middleware.ldappc.exception.LdappcException:
More than one schema entity found for
cn=unimore:domains:unimore:test,ou=unimoregroups,dc=unimore,dc=it
       at
edu.internet2.middleware.ldappc.spml.provider.LdapTargetProvider.getPSODefinition(LdapTargetProvider.java:791)
       at
edu.internet2.middleware.ldappc.spml.provider.LdapTargetProvider.getPSO(LdapTargetProvider.java:702)
       at
edu.internet2.middleware.ldappc.spml.provider.LdapTargetProvider.execute(LdapTargetProvider.java:453)
       ... 23 more
2012-02-20 15:17:31,743: [main] ERROR PSP.execute(322) -  -
LookupResponse[pso=<null>,status=failure,error=customError,errorMessages={Target
did not return a lookup
response.},requestID=2012/02/20-15:17:31.730_Q85VKUDO]

but calculation works fine:

<ldappc:calcResponse xmlns:ldappc='http://grouper.internet2.edu/ldappc'
status='success' requestID='2012/02/20-15:30:20.439_Q85V1EMB'>
 <ldappc:id ID='unimore:domains:unimore:test'/>
 <ldappc:pso entityName='group'>
   <psoID
ID='cn=unimore:domains:unimore:test,ou=unimoregroups,dc=unimore,dc=it'
targetID='ldap'/>
   <data>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='objectClass'>
       <dsml:value>top</dsml:value>
       <dsml:value>groupOfNames</dsml:value>
       <dsml:value>eduMember</dsml:value>
       <dsml:value>posixGroup</dsml:value>
       <dsml:value>unimoreGroup</dsml:value>
     </dsml:attr>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='cn'>
       <dsml:value>unimore:domains:unimore:test</dsml:value>
     </dsml:attr>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='description'>
       <dsml:value>Gruppo di test</dsml:value>
     </dsml:attr>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='gidNumber'>
       <dsml:value>1000</dsml:value>
     </dsml:attr>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='memberUid'>
       <dsml:value>malvezzi</dsml:value>
     </dsml:attr>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core'
name='hasMember'>
       <dsml:value>malvezzi</dsml:value>
     </dsml:attr>
   </data>
   <capabilityData mustUnderstand='true'
capabilityURI='urn:oasis:names:tc:SPML:2:0:reference'>
     <spmlref:reference xmlns='urn:oasis:names:tc:SPML:2:0'
xmlns:spmlref='urn:oasis:names:tc:SPML:2:0:reference'
typeOfReference='member'>
       <spmlref:toPsoID ID='uid=malvezzi,ou=people,dc=unimore,dc=it'
targetID='ldap'/>
     </spmlref:reference>
     </spmlref:reference>
   </capabilityData>
 </ldappc:pso>
</ldappc:calcResponse>

On the other hand, the error doesn't stop ldappcng from writing to the
ldap. It actually writes the group, but stops before updating the
'isMemberOf' field of the members.

Could it be a objectClass schema issue?

The groups have as objectClass:

dn: cn=unimore:domains:unimore:test,ou=unimoregroups,dc=unimore,dc=it
gidNumber: 1000
memberUid: malvezzi
objectClass: eduMember
objectClass: groupOfNames
objectClass: posixGroup
objectClass: top
objectClass: unimoreGroup
description: Gruppo di test
hasMember: malvezzi
member: uid=malvezzi,ou=people,dc=unimore,dc=it
cn: unimore:domains:unimore:test

where unimoreGroup is just a trick to include both groupOfNames and
posixGroup:

olcObjectClasses: {3}( 1.3.6.1.4.1.13331.9.9.0.5.2.5 NAME
'unimoreGroup'SUP (
 posixGroup $ groupOfNames ) STRUCTURAL )

Which informations do you need to pint me to the right direction?

Thank you,

Francesco