Grouper Users - Open Discussion List

[Francesco Malvezzi <>]

Hallo all,

loader can't provision members even in psp from command line works fine.

I think it should be a mistake in some dataSources used by loader for
the real-time provisioning.

When I add or remove a user from a group, logs catch event:

2012-05-28 16:46:52,325: [main] INFO  EventLog.info(141) -  -
[922061566cf942c1b668b9c5816fb892,'GrouperSystem','application'] add
member: group='unimore:plains:cesia' list='members'
subject='malvezzi'/'person'/'unimore' (32ms)

but then it is unable to provision anything because it doesn't resolve
any datasource:

2012-05-28 16:47:00,592: [DefaultQuartzScheduler_Worker-6] DEBUG
PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition
'simpleGroupDn' - Source attribute 'simpleGroupDn' does not exist

(for example unimore:plains:cesia is a simpleGroup, so I imagine
simpleGroupDn should be the correct dn identifier).

Just for reference, here is the simpleGroupDn definition:

 <!-- The LDAP DN of a group. For example,
"cn=groupExtension,ou=stem,ou=groups,dc=example,dc=edu". -->
  <resolver:AttributeDefinition
    id="simpleGroupDn"
    xsi:type="psp-grouper-ldap:LdapDnFromGrouperNamePSOIdentifier"
    structure="${edu.internet2.middleware.psp.structure}"
    sourceAttributeID="simpleGroupNameInStem"
    rdnAttributeName="cn"
    baseDn="${edu.internet2.middleware.psp.groupsBaseDn}"
    baseStem="${edu.internet2.middleware.psp.baseStem}">
    <!-- Dependencies which return a "groupNameInStem" attribute whose
value is the group name. -->
    <resolver:Dependency ref="simpleGroupNameInStem" />
  </resolver:AttributeDefinition>


 <resolver:AttributeDefinition
    id="simpleGroupNameInStem"
    xsi:type="grouper:FilteredName"
    sourceAttributeID="name">
    <!-- Dependencies which return a "name" attribute whose value is the
group name. -->
    <resolver:Dependency ref="GroupDataConnector" />
    <resolver:Dependency ref="DeleteGroupChangeLogDataConnector" />
    <resolver:Dependency ref="UpdateGroupNameChangeLogDataConnector" />
    <resolver:Dependency
ref="UpdateGroupDescriptionChangeLogDataConnector" />
    <resolver:Dependency
ref="GroupAttributeAssignValueChangeLogDataConnector" />
    <!-- The MINUS filter matches stems which match the first child
filter and not the second. -->
<grouper:Filter xsi:type="grouper:MINUS">
      <!-- The GroupInStem filter matches groups which are children of
the given stem. -->
      <grouper:Filter
        xsi:type="grouper:NameInStem"
        name="${edu.internet2.middleware.psp.baseStem}"
        scope="SUB" />
      <grouper:Filter
        xsi:type="grouper:NameInStem"
        name="etc"
        scope="SUB" />
    </grouper:Filter>
  </resolver:AttributeDefinition>

GroupAttributeAssignValueChangeLogDataConnector (is it the relevant
dataConnector to add and delete members action?) is unchanged:

 <!-- Returns change log attributes representing attribute value
assignment to a group. -->
  <resolver:DataConnector
    id="GroupAttributeAssignValueChangeLogDataConnector"
    xsi:type="psp-grouper-changelog:ChangeLogDataConnector">
    <!-- The AND filter matches both child filters. -->
    <grouper:Filter xsi:type="grouper:AND">
      <!-- The ChangeLogEntry filter matches change log entries with the
given category. -->
      <grouper:Filter
        xsi:type="psp-grouper-changelog:ChangeLogEntry"
        category="attributeAssignValue" />
      <!-- The ChangeLogAttributeAssignType filter matches change log
entries with the given attribute assign type. -->
      <grouper:Filter
        xsi:type="psp-grouper-changelog:ChangeLogAttributeAssignType"
        attributeAssignType="group" />
    </grouper:Filter>
  </resolver:DataConnector>

I'm sure I did something wrong. How I can debug it? As no errors show up
(this time simply no results are returned), I'm a little lost,

thank you,

Francesco