Grouper Users - Open Discussion List

[Tim Darby <>]

Thanks for this suggestion, I'll explore it.  Is there really no GSH method for deleting a member subject?  USDU, as far as I can tell, only deletes memberships.

Tim Darby
The University of Arizona
Mosaic, Systems Integration and Architecture

UITS, Rm 335, 520-626-3799

On Thu, Mar 21, 2013 at 3:15 PM, Tom Zeller <> wrote:

It is possible in the latest version of the psp to do what I think you
want, but it probably is a feature request.

In general, though, I think it is not a good idea to remove rows out
of grouper_members, but I can't really speak to that.

To only provision grouper subjects which have memberships, you would
need to customize the allSourceIdentifiersRef.

In psp.xml, if you have :

  <pso
    id="member"
    allSourceIdentifiersRef="memberSubjectIds">

then during a bulk sync, a sync will be performed for each value of
the memberSubjectIds attribute.

The memberSubjectIds attribute is defined in psp-resolver.xml, and
refers to the AllMemberSubjectIdsDataConnector, which basically just
calls

 MemberFinder.findAll(grouperSession)

I think you would want

 MembershipsFinder.findAll()

But that last part I am guessing at.

On Tue, Mar 19, 2013 at 10:17 AM, Tim Darby <> wrote:
> My sources.xml looks fine, but let me describe the recent changes I made and
> see if it makes sense:
>
> We went from Grouper 1.5.3 with an Oracle database table as the subject
> source and LDAP as the target to Grouper 2.1.3 with LDAP as both the source
> and the target.
>
> Occasionally, people get deleted from LDAP unbeknownst to Grouper.  Under
> LDAPPC, if a deleted subject in LDAP still had Grouper memberships, it would
> throw an error and abort and we'd have to run a usdu script to clear out its
> memberships in order to make LDAPPC finish successfully.  Happily, PSP
> doesn't seem to give up under these circumstances, but it doesn't like that
> there are rows in grouper_members that have no corresponding subjects in
> LDAP.  I guess the main thing I'm trying to avoid is my logs filling up with
> unnecessary errors. Should I just run a script periodically to clear these
> rows out of grouper_members?
>
>
>
> Tim Darby
> The University of Arizona
> Mosaic, Systems Integration and Architecture
>
> UITS, Rm 335, 520-626-3799
>
>
> On Tue, Mar 19, 2013 at 5:23 AM, Gagné Sébastien
> <> wrote:
>>
>> Did you change something in your sources.xml file ? Are your searches
>> properly configured ?
>>
>>
>>
>>
>>
>> De : [mailto:] De la part de Tim Darby
>> Envoyé : 18 mars 2013 16:14
>> À :
>> Objet : [grouper-users] Re: PSP and unresolvable subjects
>>
>>
>>
>> I should add that I was trying to do a bulksync and these subjects are in
>> the grouper_members table, but not in grouper_memberships or LDAP.
>>
>>
>> Tim Darby
>> The University of Arizona
>> Mosaic, Systems Integration and Architecture
>>
>> UITS, Rm 335, 520-626-3799
>>
>>
>>
>> On Mon, Mar 18, 2013 at 12:18 PM, Tim Darby <>
>> wrote:
>>
>> PSP is throwing errors about subjects that don't exist in the subject
>> source (LDAP), which is true.  However, these subjects have no memberships
>> in Grouper, so why is it trying to provision them in the first place?  I'm
>> assuming I misconfigured something, but it's not obvious to me.
>>
>>
>> Tim Darby
>> The University of Arizona
>> Mosaic, Systems Integration and Architecture
>>
>> UITS, Rm 335, 520-626-3799
>>
>>
>
>