Grouper Users - Open Discussion List

[Tom Zeller <>]

Is 

 ...psp.baseStem = unimore

in ldap.properties ?

Maybe the changelog filters in psp-resolver.xml are not perfect.

More later...

TomZ
(mobile)

On May 28, 2012, at 10:10 AM, Francesco Malvezzi 
<>
 wrote:

> Hallo all,
> 
> loader can't provision members even in psp from command line works fine.
> 
> I think it should be a mistake in some dataSources used by loader for
> the real-time provisioning.
> 
> When I add or remove a user from a group, logs catch event:
> 
> 2012-05-28 16:46:52,325: [main] INFO  EventLog.info(141) -  -
> [922061566cf942c1b668b9c5816fb892,'GrouperSystem','application'] add
> member: group='unimore:plains:cesia' list='members'
> subject='malvezzi'/'person'/'unimore' (32ms)
> 
> but then it is unable to provision anything because it doesn't resolve
> any datasource:
> 
> 2012-05-28 16:47:00,592: [DefaultQuartzScheduler_Worker-6] DEBUG
> PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition
> 'simpleGroupDn' - Source attribute 'simpleGroupDn' does not exist
> 
> (for example unimore:plains:cesia is a simpleGroup, so I imagine
> simpleGroupDn should be the correct dn identifier).
> 
> Just for reference, here is the simpleGroupDn definition:
> 
> <!-- The LDAP DN of a group. For example,
> "cn=groupExtension,ou=stem,ou=groups,dc=example,dc=edu". -->
>  <resolver:AttributeDefinition
>    id="simpleGroupDn"
>    xsi:type="psp-grouper-ldap:LdapDnFromGrouperNamePSOIdentifier"
>    structure="${edu.internet2.middleware.psp.structure}"
>    sourceAttributeID="simpleGroupNameInStem"
>    rdnAttributeName="cn"
>    baseDn="${edu.internet2.middleware.psp.groupsBaseDn}"
>    baseStem="${edu.internet2.middleware.psp.baseStem}">
>    <!-- Dependencies which return a "groupNameInStem" attribute whose
> value is the group name. -->
>    <resolver:Dependency ref="simpleGroupNameInStem" />
>  </resolver:AttributeDefinition>
> 
> 
> <resolver:AttributeDefinition
>    id="simpleGroupNameInStem"
>    xsi:type="grouper:FilteredName"
>    sourceAttributeID="name">
>    <!-- Dependencies which return a "name" attribute whose value is the
> group name. -->
>    <resolver:Dependency ref="GroupDataConnector" />
>    <resolver:Dependency ref="DeleteGroupChangeLogDataConnector" />
>    <resolver:Dependency ref="UpdateGroupNameChangeLogDataConnector" />
>    <resolver:Dependency
> ref="UpdateGroupDescriptionChangeLogDataConnector" />
>    <resolver:Dependency
> ref="GroupAttributeAssignValueChangeLogDataConnector" />
>    <!-- The MINUS filter matches stems which match the first child
> filter and not the second. -->
> <grouper:Filter xsi:type="grouper:MINUS">
>      <!-- The GroupInStem filter matches groups which are children of
> the given stem. -->
>      <grouper:Filter
>        xsi:type="grouper:NameInStem"
>        name="${edu.internet2.middleware.psp.baseStem}"
>        scope="SUB" />
>      <grouper:Filter
>        xsi:type="grouper:NameInStem"
>        name="etc"
>        scope="SUB" />
>    </grouper:Filter>
>  </resolver:AttributeDefinition>
> 
> GroupAttributeAssignValueChangeLogDataConnector (is it the relevant
> dataConnector to add and delete members action?) is unchanged:
> 
> <!-- Returns change log attributes representing attribute value
> assignment to a group. -->
>  <resolver:DataConnector
>    id="GroupAttributeAssignValueChangeLogDataConnector"
>    xsi:type="psp-grouper-changelog:ChangeLogDataConnector">
>    <!-- The AND filter matches both child filters. -->
>    <grouper:Filter xsi:type="grouper:AND">
>      <!-- The ChangeLogEntry filter matches change log entries with the
> given category. -->
>      <grouper:Filter
>        xsi:type="psp-grouper-changelog:ChangeLogEntry"
>        category="attributeAssignValue" />
>      <!-- The ChangeLogAttributeAssignType filter matches change log
> entries with the given attribute assign type. -->
>      <grouper:Filter
>        xsi:type="psp-grouper-changelog:ChangeLogAttributeAssignType"
>        attributeAssignType="group" />
>    </grouper:Filter>
>  </resolver:DataConnector>
> 
> I'm sure I did something wrong. How I can debug it? As no errors show up
> (this time simply no results are returned), I'm a little lost,
> 
> thank you,
> 
> Francesco
>