Skip to Content.
Sympa Menu

grouper-users - [grouper-users] I am completely confused

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] I am completely confused


Chronological Thread 
  • From: "Bryan E. Wooten" <>
  • To: "" <>
  • Subject: [grouper-users] I am completely confused
  • Date: Mon, 22 Apr 2013 21:31:44 +0000
  • Accept-language: en-US
  • Authentication-results: sfpop-ironport04.merit.edu; dkim=neutral (message not signed) header.i=none

I am trying to get the Grouper  LDAP_GROUPS_FROM_ATTRIBUTES to work but the results are confusing.

 

When I run the Grouper loader LDAP filter manually in my LDAP browser I get 811 results.

 

When I run the loaderRunOneJob(), I see 155 searchs. Yet over in the grouper_error.log I see this message:

 

  GrouperLoaderType.syncOneGroupMembership(2301) -  - ActiveDirectory:groups:currentEmployee done syncing membership, processed 168 records.  Total members: 168, inserts: 62, deletes: 0

 

And then when I look at the members in the UI it says there are 63 members.

 

I have DEBUG set in log4jproperties for vt-ldap, but nothing jumps out at me.

 

Does anyone have any idea how I can further trouble shoot this and understand why the Grouper group doesn’t get all the members I think it should? Something, somewhere is filtering out the results.

 

Below is my Group configuration.

 

Thanks,

 

Bryan

 

 

Attribute assignments

Owner group     Attribute name                Enabled?            Assignment values         Attribute definition        Assignment UUID

                groupsFromAttributesLdapGroup            Grouper loader LDAP     enabled                               grouperLoaderLdapDef                10635...

Metadata on assignment                             Grouper loader LDAP group attribute name        enabled                  uuemployee                grouperLoaderLdapValueDef     0b9ea...

Metadata on assignment                             Grouper loader LDAP quartz cron             enabled                  0 * 0/1 * * ?                grouperLoaderLdapValueDef     33c16...

Metadata on assignment                             Grouper loader LDAP type           enabled                  LDAP_GROUPS_FROM_ATTRIBUTES      grouperLoaderLdapValueDef     35d89...

Metadata on assignment                             Grouper loader LDAP subject _expression_              enabled                  ${subjectAttributes['unid']}        grouperLoaderLdapValueDef     4d525...

Metadata on assignment                             Grouper loader LDAP server ID  enabled                  personLdap                grouperLoaderLdapValueDef     69096...

Metadata on assignment                             Grouper loader LDAP group name _expression_    enabled                  groups:currentEmployee             grouperLoaderLdapValueDef     9243e...

Metadata on assignment                             Grouper loader LDAP subject ID type     enabled                  subjectId                grouperLoaderLdapValueDef     92bb6...

Metadata on assignment                             Grouper loader LDAP extra attributes    enabled                  unid                grouperLoaderLdapValueDef     9a5a6...

Metadata on assignment                             Grouper loader LDAP filter          enabled                  (&(uuaffiliate=afssec)(uuemployee=uuparttimeemploye))         grouperLoaderLdapValueDef     a5522...

Metadata on assignment                             Grouper loader LDAP search base DN     enabled                  ou=people,o=utah.edu                grouperLoaderLdapValueDef     ba12d...

Metadata on assignment                             Grouper loader LDAP source ID enabled                  ldap                grouperLoaderLdapValueDef     c9756...

 

 




Archive powered by MHonArc 2.6.16.

Top of Page