Grouper Users - Open Discussion List

[Baron Fujimoto <>]

Ah, that did it. I'm not sure how I overlooked the duplicate SubjectID
configs.  After removing the uid one, everything seems to work as expected
now.  Also, the cn wildcard search was in fact turning up entries without
uid attributes, but properly defining the SubjectId seems to have resolved
that issue as well.  Mahalo!

-baron
-- 
Baron Fujimoto 
<>
 :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum

On Thu, Aug 16, 2012 at 02:49:11AM +0000, Chris Hyzer wrote:
: Two things:
: 
: 1. This looks duplicated in the config, can you remove one?
: 
:     <init-param>
:       <param-name>SubjectID_AttributeType</param-name>
:       <param-value>uhuuid</param-value>
:     </init-param>
:     <init-param>
:       <param-name>SubjectID_AttributeType</param-name>
:       <param-value>uid</param-value>
:     </init-param>
: 
: 2. Do all the results returned from LDAP when you run this filter for "bob" 
have a uid?
: 
: (&amp; (|(uhuuid=%TERM%)(uid=%TERM%)(cn=*%TERM%*))(objectclass=uhEduPerson))
: 
: I think if not all have a uid then there is the problem...
: 
: Thanks,
: Chris
: 
: -----Original Message-----
: From: 

 
[mailto:]
 On Behalf Of Baron Fujimoto
: Sent: Wednesday, August 15, 2012 10:40 PM
: To: 

: Subject: Re: [grouper-users] Unable to connect to entity database
: 
: On Thu, Aug 16, 2012 at 02:16:00AM +0000, Chris Hyzer wrote:
: : Did you see this log line?  If uid is your subjectId, then all results 
need to have one, right?
: : 
: : 2012-08-15 15:26:38,834: [http-0.0.0.0-8443-4] ERROR 
LdapSourceAdapter.createSubject(465) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - No value for LDAP attribute "uid". It is Grouper attribute 
"SubjectID".
: : 
: : Does that help?  :)
: 
: It probably should, but perhaps I'm missing something.  I believe the LDAP 
being
: being used as a source does in fact have an entry with the attribute 
uid=bob being
: used in the query above.  The same query in the 2.0.0 UI also returns the 
entry
: as expected, and it is searching the same LDAP.
: 
: This is a redacted version of the GrouperJndiSourceAdapter from sources.xml
: 
:   <source 
adapterClass="edu.internet2.middleware.grouper.subj.GrouperJndiSourceAdapter">
:     <id>UH test LDAP</id>
:     <name>UH LDAP test</name>
:     <type>person</type>
:     <init-param>
:       <param-name>INITIAL_CONTEXT_FACTORY</param-name>
:       <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value>
:     </init-param>
:     <init-param>
:       <param-name>PROVIDER_URL</param-name>
:       <param-value>ldaps://***.hawaii.edu:636</param-value>
:     </init-param>
:     <init-param>
:       <param-name>SECURITY_AUTHENTICATION</param-name>
:       <param-value>simple</param-value>
:     </init-param>
:     <init-param>
:       <param-name>SECURITY_PRINCIPAL</param-name>
:       <param-value>***,dc=hawaii,dc=edu</param-value>
:     </init-param>
:     <init-param>
:       <param-name>SECURITY_CREDENTIALS</param-name>
:       <param-value>***</param-value>
:     </init-param>
:     <init-param>
:       <param-name>SubjectID_AttributeType</param-name>
:       <param-value>uhuuid</param-value>
:     </init-param>
:     <init-param>
:       <param-name>SubjectID_AttributeType</param-name>
:       <param-value>uid</param-value>
:     </init-param>
:      <init-param>
:       <param-name>SubjectID_formatToLowerCase</param-name>
:       <param-value>false</param-value>
:     </init-param>
:     <init-param>
:       <param-name>Name_AttributeType</param-name>
:       <param-value>cn</param-value>
:     </init-param>
:     <init-param>
:       <param-name>Description_AttributeType</param-name>
:       <param-value>cn</param-value>
:     </init-param>
:     
:     /// Scope Values can be: OBJECT_SCOPE, ONELEVEL_SCOPE, SUBTREE_SCOPE 
:     /// For filter use 
:     
:     <search>
:         <searchType>searchSubject</searchType>
:         <param>
:             <param-name>filter</param-name>
:             <param-value>
:                 (&amp; (uhuuid=%TERM%) (objectclass=uhEduPerson))
:             </param-value>
:         </param>
:         <param>
:             <param-name>scope</param-name>
:             <param-value>
:                 SUBTREE_SCOPE            
:             </param-value>
:         </param>
:         <param>
:             <param-name>base</param-name>
:             <param-value>
:                 dc=hawaii,dc=edu
:             </param-value>
:         </param>
:          
:     </search>
:     <search>
:         <searchType>searchSubject</searchType>
:         <param>
:             <param-name>filter</param-name>
:             <param-value>
:                 (&amp; (uid=%TERM%) (objectclass=uhEduPerson))
:             </param-value>
:         </param>
:         <param>
:             <param-name>scope</param-name>
:             <param-value>
:                 SUBTREE_SCOPE            
:             </param-value>
:         </param>
:         <param>
:             <param-name>base</param-name>
:             <param-value>
:                 dc=hawaii,dc=edu
:             </param-value>
:         </param>
:          
:     </search>
:     <search>
:         <searchType>searchSubjectByIdentifier</searchType>
:         <param>
:             <param-name>filter</param-name>
:             <param-value>
:                 (&amp; (uid=%TERM%) (objectclass=uhEduPerson))
:             </param-value>
:         </param>
:         <param>
:             <param-name>scope</param-name>
:             <param-value>
:                 SUBTREE_SCOPE            
:             </param-value>
:         </param>
:         <param>
:             <param-name>base</param-name>
:             <param-value>
:                 dc=hawaii,dc=edu
:             </param-value>
:         </param>
:     </search>
:     
:     <search>
:        <searchType>search</searchType>
:          <param>
:             <param-name>filter</param-name>
:             <param-value>
:                 (&amp; 
(|(uhuuid=%TERM%)(uid=%TERM%)(cn=*%TERM%*))(objectclass=uhEduPerson))
:             </param-value>
:         </param>
:         <param>
:             <param-name>scope</param-name>
:             <param-value>
:                 SUBTREE_SCOPE            
:             </param-value>
:         </param>
:          <param>
:             <param-name>base</param-name>
:             <param-value>
:                 dc=hawaii,dc=edu
:             </param-value>
:         </param>
:     </search>
: 
:     <init-param>
:         <param-name>subjectVirtualAttribute_0_searchAttribute0</param-name>
:         <param-value>
:             
${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('uid'),
 
"")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('cn'),
 
"")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('uhuuid'),
 "")}
:         </param-value>
:     </init-param>
:     <init-param>
:         <param-name>sortAttribute0</param-name>
:         <param-value>
:             cn
:         </param-value>
:     </init-param>
:     <init-param>
:         <param-name>searchAttribute0</param-name>
:         <param-value>
:             searchAttribute0
:         </param-value>
:     </init-param>
:     <internal-attribute>searchAttribute0</internal-attribute>
: 
:     ///Attributes you would like to display when doing a search 
:     <attribute>uid</attribute>
:     <attribute>uhuuid</attribute>
:     <attribute>cn</attribute>
:    
:   </source>
: 
: : 
: : -----Original Message-----
: : From: 

 
[mailto:]
 On Behalf Of Baron Fujimoto
: : Sent: Wednesday, August 15, 2012 9:37 PM
: : To: 

: : Subject: [grouper-users] Unable to connect to entity database
: : 
: : I've run into another puzzling behavior after upgrading from 2.0.0 to 
2.1.1
: : when using Grouper UI's Search.
: : 
: : For certain search terms, the UI consistently returns right away with
: : entity it finds, or it reports there is no such entity.  For other
: : search terms, I get the following error right away:
: : 
: : "Unable to connect to an entity database."
: : 
: : 2012-08-15 15:18:52,438: [http-0.0.0.0-8443-2] INFO  EventLog.info(156) - 
< - 93BCE90C9CAC2C3FF4C53035CFFE2185-0006 - - - > - 
[b3d5d34df53049dd87eab567d7df7942,'GrouperSystem','application'] session: 
start (0ms)
: : 2012-08-15 15:18:52,739: [http-0.0.0.0-8443-2] INFO  EventLog.info(156) - 
< - 93BCE90C9CAC2C3FF4C53035CFFE2185-0006 - - - > - 
[7076137b8c10425ea9126558ca5890f4,'baron','person'] session: start (1ms)
: : 2012-08-15 15:26:38,834: [http-0.0.0.0-8443-4] ERROR 
LdapSourceAdapter.createSubject(465) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - No value for LDAP attribute "uid". It is Grouper attribute 
"SubjectID".
: : 2012-08-15 15:26:38,838: [http-0.0.0.0-8443-4] ERROR 
GrouperCapableAction.execute(313) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - edu.internet2.middleware.subject.SourceUnavailableException: 
Exception with source: UH test LDAP, on query: 'bob'
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$6.callLogic(SourcesXmlResolver.java:874)
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$6.callLogic(SourcesXmlResolver.java:845)
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$LogLabelCallable.call(SourcesXmlResolver.java:170)
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.executeCallables(SourcesXmlResolver.java:231)
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPageHelper(SourcesXmlResolver.java:885)
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPage(SourcesXmlResolver.java:811)
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findPage(SourcesXmlResolver.java:606)
: :     at 
edu.internet2.middleware.grouper.subj.CachingResolver.findPage(CachingResolver.java:443)
: :     at 
edu.internet2.middleware.grouper.subj.ValidatingResolver.findPage(ValidatingResolver.java:234)
: :     at 
edu.internet2.middleware.grouper.SubjectFinder.findPage(SubjectFinder.java:1261)
: :     at 
edu.internet2.middleware.grouper.ui.actions.DoSearchSubjectsAction.grouperExecute(DoSearchSubjectsAction.java:193)
: :     at 
edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction$1.callback(GrouperCapableAction.java:232)
: :     at 
edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO$1.callback(Hib3TransactionDAO.java:66)
: :     at 
edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:571)
: :     at 
edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO.transactionCallback(Hib3TransactionDAO.java:56)
: :     at 
edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:87)
: :     at 
edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:106)
: :     at 
edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.grouperTransactionExecute(GrouperCapableAction.java:229)
: :     at 
edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.execute(GrouperCapableAction.java:294)
: :     at 
org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:439)
: :     at 
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:241)
: :     at 
org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)
: :     at 
org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)
: :     at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
: :     at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
: :     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter$1.callback(LoginCheckFilter.java:188)
: :     at 
edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:801)
: :     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter.doFilter(LoginCheckFilter.java:183)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
: :     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter$1.callback(LoginCheckFilter.java:188)
: :     at 
edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:801)
: :     at 
edu.internet2.middleware.grouper.ui.LoginCheckFilter.doFilter(LoginCheckFilter.java:183)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
: :     at 
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:209)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
: :     at 
uk.ac.bris.is.grouper.ui.PreCASFilter.doFilter(PreCASFilter.java:128)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
: :     at 
edu.internet2.middleware.grouper.ui.ErrorFilter.doFilter(ErrorFilter.java:147)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
: :     at 
edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:822)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
: :     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
: :     at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
: :     at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
: :     at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
: :     at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
: :     at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
: :     at 
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:615)
: :     at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
: :     at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
: :     at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
: :     at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602)
: :     at 
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
: :     at java.lang.Thread.run(Thread.java:662)
: : Caused by: edu.internet2.middleware.subject.SourceUnavailableException: 
null, source: UH test LDAP, sql: null
: :     at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:441)
: :     at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchPage(LdapSourceAdapter.java:386)
: :     at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver$6.callLogic(SourcesXmlResolver.java:849)
: :     ... 60 more
: : Caused by: java.lang.NullPointerException
: :     at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.searchHelper(LdapSourceAdapter.java:429)
: :     ... 62 more
: : 
: : 2012-08-15 15:26:38,839: [http-0.0.0.0-8443-4] ERROR 
NavExceptionHelper.getMessage(107) - < baron 
93BCE90C9CAC2C3FF4C53035CFFE2185-0032 7076137b8c10425ea9126558ca5890f4 baron 
UH test LDAP > - Missing nav key: Unable to connect to an entity database.
: : 
: : Finally, for certain other search terms, the UI just seems to consistently
: : go out to lunch, with the browser stuck trying to contact the grouper 
host.
: : 
: : Under 2.0.0 I only see the expected behavior where it either finds the
: : entity or not, right away.