Grouper Users - Open Discussion List

[Francesco Malvezzi <>]

I am trying to provision groups with both structure to the same ldap
with the same psp.

Right now psp -diff works fine and I see the groups are fine in both
structures. Unfortunately, -sync fails for the bushy structure (works
for the flat one).

This is the last part of the log of the failure:
2012-11-29 09:07:35,117: [main] ERROR BaseSpmlProvider.execute(188) -  -
Target 'ldap-bushy' - Add
AddResponse[pso=<null>,status=failure,error=customError,errorMessages={'member'
has no values.},requestID=2012/11/29-09:07:35.099]
2012-11-29 09:07:35,117: [main] ERROR BaseSpmlProvider.execute(190) -  -
Target 'ldap-bushy' - Add XML:
<addResponse xmlns='urn:oasis:names:tc:SPML:2:0' status='failure'
requestID='2012/11/29-09:07:35.099' error='customError'>
  <errorMessage>'member' has no values.</errorMessage>
</addResponse>

2012-11-29 09:07:35,118: [main] ERROR BaseSpmlProvider.execute(188) -  -
Target 'psp' - Add
AddResponse[pso=<null>,status=failure,error=customError,errorMessages={'member'
has no values.},requestID=2012/11/29-09:07:35.099]
2012-11-29 09:07:35,119: [main] ERROR BaseSpmlProvider.execute(190) -  -
Target 'psp' - Add XML:
<addResponse xmlns='urn:oasis:names:tc:SPML:2:0' status='failure'
requestID='2012/11/29-09:07:35.099' error='customError'>
  <errorMessage>'member' has no values.</errorMessage>
</addResponse>

2012-11-29 09:07:35,119: [main] ERROR Psp.execute(1440) -  - Psp 'psp' -
Sync
SyncResponse[id=fed:proust:recherche:guermantes:lettori,status=failure,error=customError,errorMessages={'member'
has no
values.},requestID=2012/11/29-09:07:34.797,AddResponse[pso=<null>,status=failure,error=customError,errorMessages={'member'
has no values.},requestID=2012/11/29-09:07:35.099]]
2012-11-29 09:07:35,120: [main] ERROR Psp.execute(1442) -  - Psp 'psp' -
Sync SPML:
<psp:syncResponse xmlns:psp='http://grouper.internet2.edu/psp'
status='failure' requestID='2012/11/29-09:07:34.797' error='customError'>
  <addResponse xmlns='urn:oasis:names:tc:SPML:2:0' status='failure'
requestID='2012/11/29-09:07:35.099' error='customError'>
    <errorMessage>'member' has no values.</errorMessage>
  </addResponse>
  <errorMessage>'member' has no values.</errorMessage>
  <psp:id ID='fed:proust:recherche:guermantes:lettori'/>
</psp:syncResponse>


I think it is related to the member definition which has not been forked
for flat/bushy.

This is group-bushy from psp.xml:
  <pso
    id="group-bushy"
    authoritative="true"
    allSourceIdentifiersRef="groupNames">

    <!-- The ldap group DN. -->
    <identifier
      ref="groupDn-bushy"
      targetId="ldap-bushy"
      containerId="${edu.internet2.middleware.psp.groupsBaseDn.bushy}" />

    <!-- Identifies ldap group objects which exist on the target by
objectClass attribute value. -->
    <identifyingAttribute
      name="objectClass"
      value="${edu.internet2.middleware.psp.groupObjectClass}" />

    <!-- The "old" ldap group DN if a group has been renamed. -->
    <alternateIdentifier ref="groupDnAlternate-bushy" />

    <!-- The "old" ldap group DN calculated from group update change log
events. -->
    <alternateIdentifier ref="groupDnAlternateChangeLog-bushy" />

    <!-- The ldap group "objectClass" attribute. No existing values will
be deleted since retainAll is true. -->
    <attribute
      name="objectClass"
      ref="groupObjectclass"
      retainAll="true" />

    <!-- The ldap group "cn" attribute. -->
    <attribute name="cn"
               ref="cn-bushy" />

    <!-- The ldap group "description" attribute. -->
    <attribute
      name="description"
      ref="groupDescription" />

    <!-- The ldap group "hasMember" attribute includes the names of the
groups that are members of the group. -->
    <!-- The ldap group "hasMember" attribute includes the ids of the
subjects that are members of the group. -->
    <attribute
      name="hasMember"
      ref="hasMember" />

    <!-- The ldap group "isMemberOf" attribute consists of the names of
the groups that the group is a member of. -->
    <attribute
      name="isMemberOf"
      ref="groupIsMemberOf" />

    <references
      name="member"
      emptyValue="">

      <reference
        ref="membersLdap"
        toObject="member" />

      <reference
        ref="membersGsa"
        toObject="group" />

    </references>

and this is membersLdap from psp-resolver.xml
  <!-- The values of the "membersLdap" attribute are the subject ids of
group members from the "ldap" source. -->
  <resolver:AttributeDefinition
    id="membersLdap"
    xsi:type="grouper:Member"
    sourceAttributeID="members">
    <resolver:Dependency ref="GroupDataConnector" />
    <!-- The values of the "id" attribute are the identifiers of
subjects whose source id is "ldap". -->
    <grouper:Attribute
      id="id"
      source="ldap" />
  </resolver:AttributeDefinition>

The whole conf file can be found at:
https://github.com/francescm/grouper-psp-bushy-flat

If you need more, i can give you almost anything (xmlexport, ldap dumps
other config files), because this is a test system with fake data.

Could you please help me in this task?

Thank you,

Francesco