Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] ldap to grouper provisioning again

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] ldap to grouper provisioning again


Chronological Thread 
  • From: Tom Zeller <>
  • To: "Bryan E. Wooten" <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] ldap to grouper provisioning again
  • Date: Mon, 7 Jan 2013 17:32:41 -0600

> The error I get is this:
> <psp:calcResponse
> status='failure'
> error='noSuchIdentifier'>
> Unable to calculate provisioned object.
> <psp:id ID='edu:groups'/>

In general, this means that a provisioned object identifier can not be
calculated for the "edu:groups" identifier.

Each provisioned service object (<pso/>) in psp.xml has an identifier
(<identifier ref=someAttributeDefinition />) which refers to an
attribute definition in psp-resolver.xml which returns a pso
identifier.

At least one of the pso identifiers must resolve.

So, if "edu:groups" is a stem that should be provisioned as an
organizationalUnit, take a look at the attribute definition in
psp-resolver.xml (probably "stemDn") to which the pso identifier
refers to.

I would debug by running "bin/gsh.sh -psp -calc 'edu:groups'" with
logging increased to debug or trace for the psp, shib-common, and
maybe vt-ldap (see grouper/conf/log4j.properties).

Hope this helps.



Archive powered by MHonArc 2.6.16.

Top of Page