Grouper Users - Open Discussion List

[Tom Zeller <>]

In the "group-bushy" and "groupMemberMembership-bushy" psos, change
the reference toObject from "group" to "group-bushy" for the member
and/or memberOf references.

That might not be the only change, but it is a start.

By the way, using github for your configuration files makes helping
you much easier. Thanks.

TomZ

On Thu, Nov 29, 2012 at 2:32 AM, Francesco Malvezzi
<>
 wrote:
> I am trying to provision groups with both structure to the same ldap
> with the same psp.
>
> Right now psp -diff works fine and I see the groups are fine in both
> structures. Unfortunately, -sync fails for the bushy structure (works
> for the flat one).
>
> This is the last part of the log of the failure:
> 2012-11-29 09:07:35,117: [main] ERROR BaseSpmlProvider.execute(188) -  -
> Target 'ldap-bushy' - Add
> AddResponse[pso=<null>,status=failure,error=customError,errorMessages={'member'
> has no values.},requestID=2012/11/29-09:07:35.099]
> 2012-11-29 09:07:35,117: [main] ERROR BaseSpmlProvider.execute(190) -  -
> Target 'ldap-bushy' - Add XML:
> <addResponse xmlns='urn:oasis:names:tc:SPML:2:0' status='failure'
> requestID='2012/11/29-09:07:35.099' error='customError'>
>   <errorMessage>'member' has no values.</errorMessage>
> </addResponse>
>
> 2012-11-29 09:07:35,118: [main] ERROR BaseSpmlProvider.execute(188) -  -
> Target 'psp' - Add
> AddResponse[pso=<null>,status=failure,error=customError,errorMessages={'member'
> has no values.},requestID=2012/11/29-09:07:35.099]
> 2012-11-29 09:07:35,119: [main] ERROR BaseSpmlProvider.execute(190) -  -
> Target 'psp' - Add XML:
> <addResponse xmlns='urn:oasis:names:tc:SPML:2:0' status='failure'
> requestID='2012/11/29-09:07:35.099' error='customError'>
>   <errorMessage>'member' has no values.</errorMessage>
> </addResponse>
>
> 2012-11-29 09:07:35,119: [main] ERROR Psp.execute(1440) -  - Psp 'psp' -
> Sync
> SyncResponse[id=fed:proust:recherche:guermantes:lettori,status=failure,error=customError,errorMessages={'member'
> has no
> values.},requestID=2012/11/29-09:07:34.797,AddResponse[pso=<null>,status=failure,error=customError,errorMessages={'member'
> has no values.},requestID=2012/11/29-09:07:35.099]]
> 2012-11-29 09:07:35,120: [main] ERROR Psp.execute(1442) -  - Psp 'psp' -
> Sync SPML:
> <psp:syncResponse xmlns:psp='http://grouper.internet2.edu/psp'
> status='failure' requestID='2012/11/29-09:07:34.797' error='customError'>
>   <addResponse xmlns='urn:oasis:names:tc:SPML:2:0' status='failure'
> requestID='2012/11/29-09:07:35.099' error='customError'>
>     <errorMessage>'member' has no values.</errorMessage>
>   </addResponse>
>   <errorMessage>'member' has no values.</errorMessage>
>   <psp:id ID='fed:proust:recherche:guermantes:lettori'/>
> </psp:syncResponse>
>
>
> I think it is related to the member definition which has not been forked
> for flat/bushy.
>
> This is group-bushy from psp.xml:
>   <pso
>     id="group-bushy"
>     authoritative="true"
>     allSourceIdentifiersRef="groupNames">
>
>     <!-- The ldap group DN. -->
>     <identifier
>       ref="groupDn-bushy"
>       targetId="ldap-bushy"
>       containerId="${edu.internet2.middleware.psp.groupsBaseDn.bushy}" />
>
>     <!-- Identifies ldap group objects which exist on the target by
> objectClass attribute value. -->
>     <identifyingAttribute
>       name="objectClass"
>       value="${edu.internet2.middleware.psp.groupObjectClass}" />
>
>     <!-- The "old" ldap group DN if a group has been renamed. -->
>     <alternateIdentifier ref="groupDnAlternate-bushy" />
>
>     <!-- The "old" ldap group DN calculated from group update change log
> events. -->
>     <alternateIdentifier ref="groupDnAlternateChangeLog-bushy" />
>
>     <!-- The ldap group "objectClass" attribute. No existing values will
> be deleted since retainAll is true. -->
>     <attribute
>       name="objectClass"
>       ref="groupObjectclass"
>       retainAll="true" />
>
>     <!-- The ldap group "cn" attribute. -->
>     <attribute name="cn"
>                ref="cn-bushy" />
>
>     <!-- The ldap group "description" attribute. -->
>     <attribute
>       name="description"
>       ref="groupDescription" />
>
>     <!-- The ldap group "hasMember" attribute includes the names of the
> groups that are members of the group. -->
>     <!-- The ldap group "hasMember" attribute includes the ids of the
> subjects that are members of the group. -->
>     <attribute
>       name="hasMember"
>       ref="hasMember" />
>
>     <!-- The ldap group "isMemberOf" attribute consists of the names of
> the groups that the group is a member of. -->
>     <attribute
>       name="isMemberOf"
>       ref="groupIsMemberOf" />
>
>     <references
>       name="member"
>       emptyValue="">
>
>       <reference
>         ref="membersLdap"
>         toObject="member" />
>
>       <reference
>         ref="membersGsa"
>         toObject="group" />
>
>     </references>
>
> and this is membersLdap from psp-resolver.xml
>   <!-- The values of the "membersLdap" attribute are the subject ids of
> group members from the "ldap" source. -->
>   <resolver:AttributeDefinition
>     id="membersLdap"
>     xsi:type="grouper:Member"
>     sourceAttributeID="members">
>     <resolver:Dependency ref="GroupDataConnector" />
>     <!-- The values of the "id" attribute are the identifiers of
> subjects whose source id is "ldap". -->
>     <grouper:Attribute
>       id="id"
>       source="ldap" />
>   </resolver:AttributeDefinition>
>
> The whole conf file can be found at:
> https://github.com/francescm/grouper-psp-bushy-flat
>
> If you need more, i can give you almost anything (xmlexport, ldap dumps
> other config files), because this is a test system with fake data.
>
> Could you please help me in this task?
>
> Thank you,
>
> Francesco