Grouper Users - Open Discussion List

[Baron Fujimoto <>]

On Thu, Aug 16, 2012 at 02:16:00AM +0000, Chris Hyzer wrote:
: Did you see this log line?  If uid is your subjectId, then all results need 
to have one, right?
: 
: 2012-08-15 15:26:38,834: [http-0.0.0.0-8443-4] ERROR 
LdapSourceAdapter.createSubject(465) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - No value for LDAP attribute "uid". It is Grouper attribute 
"SubjectID".
: 
: Does that help?  :)

It probably should, but perhaps I'm missing something.  I believe the LDAP 
being
being used as a source does in fact have an entry with the attribute uid=bob 
being
used in the query above.  The same query in the 2.0.0 UI also returns the 
entry
as expected, and it is searching the same LDAP.

This is a redacted version of the GrouperJndiSourceAdapter from sources.xml

  <source 
adapterClass="edu.internet2.middleware.grouper.subj.GrouperJndiSourceAdapter">
    <id>UH test LDAP</id>
    <name>UH LDAP test</name>
    <type>person</type>
    <init-param>
      <param-name>INITIAL_CONTEXT_FACTORY</param-name>
      <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value>
    </init-param>
    <init-param>
      <param-name>PROVIDER_URL</param-name>
      <param-value>ldaps://***.hawaii.edu:636</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_AUTHENTICATION</param-name>
      <param-value>simple</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_PRINCIPAL</param-name>
      <param-value>***,dc=hawaii,dc=edu</param-value>
    </init-param>
    <init-param>
      <param-name>SECURITY_CREDENTIALS</param-name>
      <param-value>***</param-value>
    </init-param>
    <init-param>
      <param-name>SubjectID_AttributeType</param-name>
      <param-value>uhuuid</param-value>
    </init-param>
    <init-param>
      <param-name>SubjectID_AttributeType</param-name>
      <param-value>uid</param-value>
    </init-param>
     <init-param>
      <param-name>SubjectID_formatToLowerCase</param-name>
      <param-value>false</param-value>
    </init-param>
    <init-param>
      <param-name>Name_AttributeType</param-name>
      <param-value>cn</param-value>
    </init-param>
    <init-param>
      <param-name>Description_AttributeType</param-name>
      <param-value>cn</param-value>
    </init-param>
    
    /// Scope Values can be: OBJECT_SCOPE, ONELEVEL_SCOPE, SUBTREE_SCOPE 
    /// For filter use 
    
    <search>
        <searchType>searchSubject</searchType>
        <param>
            <param-name>filter</param-name>
            <param-value>
                (&amp; (uhuuid=%TERM%) (objectclass=uhEduPerson))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>
                SUBTREE_SCOPE            
            </param-value>
        </param>
        <param>
            <param-name>base</param-name>
            <param-value>
                dc=hawaii,dc=edu
            </param-value>
        </param>
         
    </search>
    <search>
        <searchType>searchSubject</searchType>
        <param>
            <param-name>filter</param-name>
            <param-value>
                (&amp; (uid=%TERM%) (objectclass=uhEduPerson))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>
                SUBTREE_SCOPE            
            </param-value>
        </param>
        <param>
            <param-name>base</param-name>
            <param-value>
                dc=hawaii,dc=edu
            </param-value>
        </param>
         
    </search>
    <search>
        <searchType>searchSubjectByIdentifier</searchType>
        <param>
            <param-name>filter</param-name>
            <param-value>
                (&amp; (uid=%TERM%) (objectclass=uhEduPerson))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>
                SUBTREE_SCOPE            
            </param-value>
        </param>
        <param>
            <param-name>base</param-name>
            <param-value>
                dc=hawaii,dc=edu
            </param-value>
        </param>
    </search>
    
    <search>
       <searchType>search</searchType>
         <param>
            <param-name>filter</param-name>
            <param-value>
                (&amp; 
(|(uhuuid=%TERM%)(uid=%TERM%)(cn=*%TERM%*))(objectclass=uhEduPerson))
            </param-value>
        </param>
        <param>
            <param-name>scope</param-name>
            <param-value>
                SUBTREE_SCOPE            
            </param-value>
        </param>
         <param>
            <param-name>base</param-name>
            <param-value>
                dc=hawaii,dc=edu
            </param-value>
        </param>
    </search>

    <init-param>
        <param-name>subjectVirtualAttribute_0_searchAttribute0</param-name>
        <param-value>
            
${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('uid'),
 
"")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('cn'),
 
"")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('uhuuid'),
 "")}
        </param-value>
    </init-param>
    <init-param>
        <param-name>sortAttribute0</param-name>
        <param-value>
            cn
        </param-value>
    </init-param>
    <init-param>
        <param-name>searchAttribute0</param-name>
        <param-value>
            searchAttribute0
        </param-value>
    </init-param>
    <internal-attribute>searchAttribute0</internal-attribute>

    ///Attributes you would like to display when doing a search 
    <attribute>uid</attribute>
    <attribute>uhuuid</attribute>
    <attribute>cn</attribute>
   
  </source>

: 
: -----Original Message-----
: From: 

 
[mailto:]
 On Behalf Of Baron Fujimoto
: Sent: Wednesday, August 15, 2012 9:37 PM
: To: 

: Subject: [grouper-users] Unable to connect to entity database
: 
: I've run into another puzzling behavior after upgrading from 2.0.0 to 2.1.1
: when using Grouper UI's Search.
: 
: For certain search terms, the UI consistently returns right away with
: entity it finds, or it reports there is no such entity.  For other
: search terms, I get the following error right away:
: 
: "Unable to connect to an entity database."
: 
: 2012-08-15 15:18:52,438: [http-0.0.0.0-8443-2] INFO  EventLog.info(156) - < 
- 93BCE90C9CAC2C3FF4C53035CFFE2185-0006 - - - > - 
[b3d5d34df53049dd87eab567d7df7942,'GrouperSystem','application'] session: 
start (0ms)
: 2012-08-15 15:18:52,739: [http-0.0.0.0-8443-2] INFO  EventLog.info(156) - < 
- 93BCE90C9CAC2C3FF4C53035CFFE2185-0006 - - - > - 
[7076137b8c10425ea9126558ca5890f4,'baron','person'] session: start (1ms)
: 2012-08-15 15:26:38,834: [http-0.0.0.0-8443-4] ERROR 
LdapSourceAdapter.createSubject(465) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - No value for LDAP attribute "uid". It is Grouper attribute 
"SubjectID".
: 2012-08-15 15:26:38,838: [http-0.0.0.0-8443-4] ERROR 
GrouperCapableAction.execute(313) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - edu.internet2.middleware.subject.SourceUnavailableException: 
Exception with source: UH test LDAP, on query: 'bob'
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$6.callLogic(SourcesXmlResolver.java:874)
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$6.callLogic(SourcesXmlResolver.java:845)
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$LogLabelCallable.call(SourcesXmlResolver.java:170)
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.executeCallables(SourcesXmlResolver.java:231)
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPageHelper(SourcesXmlResolver.java:885)
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPage(SourcesXmlResolver.java:811)
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPage(SourcesXmlResolver.java:606)
:     at 
edu.internet2.middleware.grouper.subj.CachingResolver.findPage(CachingResolver.java:443)
:     at 
edu.internet2.middleware.grouper.subj.ValidatingResolver.findPage(ValidatingResolver.java:234)
:     at 
edu.internet2.middleware.grouper.SubjectFinder.findPage(SubjectFinder.java:1261)
:     at 
edu.internet2.middleware.grouper.ui.actions.DoSearchSubjectsAction.grouperExecute(DoSearchSubjectsAction.java:193)
:     at 
edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction$1.callback(GrouperCapableAction.java:232)
:     at 
edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO$1.callback(Hib3TransactionDAO.java:66)
:     at 
edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:571)
:     at 
edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO.transactionCallback(Hib3TransactionDAO.java:56)
:     at 
edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:87)
:     at 
edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:106)
:     at 
edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.grouperTransactionExecute(GrouperCapableAction.java:229)
:     at 
edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.execute(GrouperCapableAction.java:294)
:     at 
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:439)
:     at 
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:241)
:     at 
org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)
:     at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)
:     at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
:     at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
:     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
:     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
:     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter$1.callback(LoginCheckFilter.java:188)
:     at 
edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:801)
:     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter.doFilter(LoginCheckFilter.java:183)
:     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
:     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
:     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter$1.callback(LoginCheckFilter.java:188)
:     at 
edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:801)
:     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter.doFilter(LoginCheckFilter.java:183)
:     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
:     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
:     at 
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:209)
:     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
:     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
:     at uk.ac.bris.is.grouper.ui.PreCASFilter.doFilter(PreCASFilter.java:128)
:     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
:     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
:     at 
edu.internet2.middleware.grouper.ui.ErrorFilter.doFilter(ErrorFilter.java:147)
:     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
:     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
:     at 
edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:822)
:     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
:     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
:     at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
:     at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
:     at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
:     at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
:     at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
:     at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:615)
:     at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
:     at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
:     at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
:     at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602)
:     at 
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
:     at java.lang.Thread.run(Thread.java:662)
: Caused by: edu.internet2.middleware.subject.SourceUnavailableException: 
null, source: UH test LDAP, sql: null
:     at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:441)
:     at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchPage(LdapSourceAdapter.java:386)
:     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$6.callLogic(SourcesXmlResolver.java:849)
:     ... 60 more
: Caused by: java.lang.NullPointerException
:     at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:429)
:     ... 62 more
: 
: 2012-08-15 15:26:38,839: [http-0.0.0.0-8443-4] ERROR 
NavExceptionHelper.getMessage(107) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - Missing nav key: Unable to connect to an entity database.
: 
: Finally, for certain other search terms, the UI just seems to consistently
: go out to lunch, with the browser stuck trying to contact the grouper host.
: 
: Under 2.0.0 I only see the expected behavior where it either finds the
: entity or not, right away.
: 
: -- 
: Baron Fujimoto 
<>
 :: UH Information Technology Services
: minutas cantorum, minutas balorum, minutas carboratum desendus pantorum

-- 
Baron Fujimoto 
<>
 :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum