Grouper Users - Open Discussion List

[Sebastien Gagne <>]

Yes the PSP cares very much about case sensitivity. You can run into problems with different case CN/cn or OU/ou from LDAP (we did with AD). There are some configuration for it though. 

---
Sébastien Gagné, M.Ing., ing. jr
Analyste en informatique - Université de Montréal

On Mon, Mar 11, 2013 at 4:31 PM, Paul Engle <> wrote:

Aha! I found the problem. In the psp.xml, the value of the
identifyingAttribute for stems is "organizationalUnit". But in our ldap
server, the actual value for the ou=Groups,dc=rice,dc=edu was all lower
case "organizationalunit". That doesn't matter to our ldap server, but
apparently PSP cares. I changed the case of the value, and the
provisioning seems to be proceeding now.

  -paul

On 3/11/2013 2:44 PM, Sebastien Gagne wrote:
> It's hard without configuration sample, but my guess would that it tries
> to build a stem definition for your root folder and that fails. The
> problem would be that "ou=Groups,dc=rice,dc=edu" is not part of the
> bulkSync, this is probably an inconsistency in the configuration where
> you maybe don't provision your root stem or maybe you do and don't
>
> How do you provision your groups in your LDAP ? flat or bushy ? do you
> include your root stem ?
>
>
> ---
> Sébastien Gagné, M.Ing., ing. jr
> Analyste en informatique - Université de Montréal
>
>
> On Mon, Mar 11, 2013 at 10:49 AM, Paul Engle <

> <mailto:>> wrote:
>
>
>     All,
>       I'm trying to migrate from 1.6.3 to 2.1.3, switching from ldappc (not
>     even -ng) to psp in the process. Since the configuration is much more
>     complex, I'm trying to use a pretty stock configuration based on the
>     psp-example-grouper-to-openldap files provided.
>
>     Essentially, the only changes I've made are:
>      * site specific configuration in ldap.properties & sources.xml
>      * add 'riceGroup' as a group objectClass in the static resolver
>      * add a 'givenName' attribute for groups, using the group name
>     attribute
>
>
>     I can sync individual people or groups and everything comes out as
>     expected. However, when I try a bulkSync, I get the following error:
>
>     <psp:bulkSyncResponse xmlns:psp='http://grouper.internet2.edu/psp'
>     status='failure' requestID='2013/03/11-09:12:47.441'
>     error='customError'>
>       <errorMessage>Unable to determine schema entity for
>     ou=Groups,dc=rice,dc=edu</errorMessage>
>     </psp:bulkSyncResponse>
>
>
>     That is the groupsBaseDn from ldap.properties, so I'm not sure why it's
>     trying to get a schema for it. Any hints as to what I can look at are
>     welcome.
>
>       -paul
>
>     --
>     Paul D. Engle              |  Rice University
>     Sr. Systems Administrator  |  Information Technology - MS119

>     (713)348-4702 <tel:%28713%29348-4702>              |  PO Box 1892
>     <mailto:>            |  Houston, TX
>     77252-1892

>
>


--
Paul D. Engle              |  Rice University
Sr. Systems Administrator  |  Information Technology - MS119
(713)348-4702              |  PO Box 1892
           |  Houston, TX 77252-1892