Grouper Users - Open Discussion List

[Chris Hyzer <>]

I cut it, just didn’t paste.  Yes, that is the line J

 

Thanks,

Chris

 

From: [mailto:] On Behalf Of Brian Koehmstedt
Sent: Thursday, July 03, 2014 1:45 PM
To:
Subject: Re: [grouper-users] Grouper loader, LDAP "0 membership count" question

 

Chris I think you perhaps forgot to cut and paste the log4j.properties line that you wanted me to set.
Is it:
log4j.logger.edu.internet2.middleware.grouper.app.loader = DEBUG
?
(which I've had in there)

Nevertheless, I had to start over (because the 'gsh -test -all' as per build instructions wiped my database out, yikes!), and the second attempt appears to be working.  In doing this, I was doing some cut and paste work and pasted some values back in with some leading and trailing spaces by accident.  I got some different errors in the log file that I figured out were due to these extra spaces not being trimmed off, so perhaps that's what happened in the first go around too, but perhaps it was on an attribute that caused silent failure instead of loud failure (perhaps extra space on 'Grouper loader LDAP subject attribute name' value?).

At any rate, I'd still like to know any log4j tweaks so that I know what to do in the future to debug problems like this (if it isn't the log4j line I already pasted above).

Thanks.

On 7/3/2014 9:45 AM, Chris Hyzer wrote:

Can you set this in the log4j.properties and run the loader job and see if you can see what the issue is, and if not, forward it along (sanitized, or if its sensitive, just to me?)

 

 

Thanks,

Chris

 

From: [] On Behalf Of Brian Koehmstedt
Sent: Wednesday, July 02, 2014 3:47 PM
To:
Subject: [grouper-users] Grouper loader, LDAP "0 membership count" question

 

Hello.  I'm new to Grouper and trying to attempt my first group loaded with people from LDAP.  I'm more or less trying to follow the example from https://spaces.internet2.edu/display/Grouper/Grouper+Loader+LDAP+example.

I can see in my LDAP log file that the query is running and 134 entries are being returned for the query.  But in gsh when I attempt to load the group, I see this:
loader ran successfully, inserted 0 memberships, deleted 0 memberships, total membership count: 0

So something is excluding those 134 rows from being processed by the loader, but I can't tell why.  Any guidance would be appreciated.

Details:

Attribute assignments

	Owner group	Attribute name	Enabled?	Assignment values	Attribute definition	Assignment UUID
	LDAP Information Technology Dept Group	Grouper loader LDAP	enabled		grouperLoaderLdapDef	3f85a...
Metadata on assignment		Grouper loader LDAP search base DN	enabled	ou=people	grouperLoaderLdapValueDef	1a8e4...
Metadata on assignment		Grouper loader LDAP subject attribute name	enabled	ucMercedEduIDMID	grouperLoaderLdapValueDef	1c296...
Metadata on assignment		Grouper loader LDAP quartz cron	enabled	0 0 * * * ?	grouperLoaderLdapValueDef	73944...
Metadata on assignment		Grouper loader LDAP server ID	enabled	personLdap	grouperLoaderLdapValueDef	b7b8f...
Metadata on assignment		Grouper loader LDAP filter	enabled	(&(organizationalStatus=active)(ou=Information Technology))	grouperLoaderLdapValueDef	c3de1...
Metadata on assignment		Grouper loader LDAP source ID	enabled	waveldap	grouperLoaderLdapValueDef	ce3d4...
Metadata on assignment		Grouper loader LDAP type	enabled	LDAP_SIMPLE	grouperLoaderLdapValueDef	f9216...

(I added Grouper loader LDAP source ID, which the Example page doesn't have.  I tried removing it, but got the same result.)

gsh:
gsh 0% grouperSession = GrouperSession.startRootSession();
edu.internet2.middleware.grouper.GrouperSession: aab002c0e06b4dc7808ff68c8e94eb81,'GrouperSystem','application'
gsh 1% loaderGroup = GroupFinder.findByName(grouperSession, "ucmerced:ldapit");
group: name='ucmerced:ldapit' displayName='UC Merced:LDAP Information Technology Dept Group' uuid='b5698cf62eb146a58c2533b718d826d1'
gsh 2% loaderRunOneJob(loaderGroup);
loader ran successfully, inserted 0 memberships, deleted 0 memberships, total membership count: 0

LDAP access log:
[02/Jul/2014:12:35:47 -0700] conn=0 op=1 SRCH base="ou=people,dc=ucmerced,dc=edu" scope=2 filter="(&(organizationalStatus=active)(ou=Information Technology))" attrs=""
[02/Jul/2014:12:35:50 -0700] conn=0 op=1 RESULT err=0 tag=101 nentries=134 etime=3 notes=U