Grouper Users - Open Discussion List

[David Langenberg <>]

Yes, mind sending me (off list) a santitized copy of your psp configs?

Thanks

Dave

On Thu, Feb 26, 2015 at 4:26 PM, Niva Agmon <> wrote:

Yes, but obviously I’m doing something wrong…

 

From: David Langenberg [mailto:]
Sent: Thursday, February 26, 2015 6:08 PM
To: Niva Agmon
Cc:
Subject: Re: [grouper-users] group memebership is not provisioned to LDAP

 

Ok, so in the case of b are you ensuring you're searching on your particular subject_id as part of your searches in your filters?

 

 

Dave

 

On Thu, Feb 26, 2015 at 3:43 PM, Niva Agmon <> wrote:

Yes and no –

a.       my subject source is the same LDAP server that I’m trying to update with the new group

b.      my subject_id is a unique number and is NOT the same the rdn attribute

 

Thanks!

Niva

From: David Langenberg [mailto:]
Sent: Thursday, February 26, 2015 5:08 PM
To: Niva Agmon
Cc:
Subject: Re: [grouper-users] group memebership is not provisioned to LDAP

 

Is your subject source for grouper the same LDAP server?  Is you subject_id in grouper the same as the rdn attribute in LDAP?

 

Dave

 

On Thu, Feb 26, 2015 at 1:58 PM, Niva Agmon <> wrote:

Hello all,

 

I’m trying to provision a test group from grouper to ldap and the group is created in LDAP without the membership.

 

Command:

gsh -psp -calc PSP:test2 –returnEverything

 

The  errors are the following. Not sure what they refer to and which attributes are missing:

-  - Pso reference 'membersLdap' - Source attribute does not exist

-- PsoReference.getReferences(97) -  - Pso reference 'membersGsa' - Source attribute does not exist

-- PSO Identifier Definition 'memberDN' - Source attribute 'memberDN' does not exist

--- DEBUG Pso.getPSO(229) -  - Pso 'member' - Unable to calculate pso identifier for 'PSP:test2'

 

 

2015-02-26 12:58:56,744: [main] DEBUG Psp.execute(1084) -  - PSP 'psp' - Calc CalcRequest[id=PSP:test2,requestID=<null>,returnData=everything] Resolved attributes '[groupDescription, cn, groupDn]'.

2015-02-26 12:58:56,744: [main] DEBUG Pso.getPSO(222) -  - Pso 'group' - Get pso for 'PSP:test2'

2015-02-26 12:58:56,744: [main] DEBUG PsoIdentifier.getPSOIdentifier(114) -  - PSO Identifier Definition 'groupDn' - Returned 'PSOIdentifier[id='cn=PSP:test2,ou=groups,dc=temple,dc=edu',targetID=ldap,containerID=<null>]'

2015-02-26 12:58:56,783: [main] DEBUG PsoReferences.getReferences(148) -  - Pso references 'member' - Get references for 'PSP:test2'

2015-02-26 12:58:56,785: [main] DEBUG PsoReference.getReferences(90) -  - Pso reference 'membersLdap' - Get references for 'PSP:test2'

2015-02-26 12:58:56,785: [main] DEBUG PsoReference.getReferences(97) -  - Pso reference 'membersLdap' - Source attribute does not exist

2015-02-26 12:58:56,786: [main] DEBUG PsoReference.getReferences(90) -  - Pso reference 'membersGsa' - Get references for 'PSP:test2'

2015-02-26 12:58:56,788: [main] DEBUG PsoReference.getReferences(97) -  - Pso reference 'membersGsa' - Source attribute does not exist

2015-02-26 12:58:56,788: [main] DEBUG PsoReferences.getReferences(160) -  - Pso references 'member' - Returned 0 references.

2015-02-26 12:58:56,789: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'groupDn' - Source attribute 'groupDnAlternate' does not exist

2015-02-26 12:58:56,790: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'groupDn' - Source attribute 'groupDnAlternateChangeLog' does not exist

2015-02-26 12:58:56,794: [main] DEBUG Pso.getPSO(282) -  - Pso 'group' - Get pso for 'PSP:test2' returned 1 objects.

2015-02-26 12:58:56,796: [main] DEBUG Pso.getPSO(222) -  - Pso 'member' - Get pso for 'PSP:test2'

2015-02-26 12:58:56,797: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'memberDN' - Source attribute 'memberDN' does not exist

2015-02-26 12:58:56,797: [main] DEBUG Pso.getPSO(229) -  - Pso 'member' - Unable to calculate pso identifier for 'PSP:test2'

2015-02-26 12:58:56,798: [main] DEBUG Pso.getPSO(222) -  - Pso 'groupMembership' - Get pso for 'PSP:test2'

2015-02-26 12:58:56,799: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipGroupDn' - Source attribute 'changeLogMembershipGroupDn' does not exist

2015-02-26 12:58:56,799: [main] DEBUG Pso.getPSO(229) -  - Pso 'groupMembership' - Unable to calculate pso identifier for 'PSP:test2'

2015-02-26 12:58:56,801: [main] INFO  Psp.execute(1009) -  - Psp 'psp' - Calc CalcResponse[id=PSP:test2,status=success,requestID=2015/02/26-12:58:56.542,pso=PSO[psoID=PSOIdentifier[id='cn=PSP:test2,ou=groups,dc=temple,dc=edu',targetID=ldap,containerID=<null>]]]

2015-02-26 12:58:56,802: [main] INFO  Psp.execute(1011) -  - Psp 'psp' - Calc XML:

<psp:calcResponse xmlns:psp='http://grouper.internet2.edu/psp' status='success' requestID='2015/02/26-12:58:56.542'>

  <psp:id ID='PSP:test2'/>

  <psp:pso entityName='group'>

    <psoID ID='cn=PSP:test2,ou=groups,dc=temple,dc=edu' targetID='ldap'/>

    <data>

      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='cn'>

        <dsml:value>PSP:test2</dsml:value>

      </dsml:attr>

      <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='description'>

        <dsml:value>test group from grouper</dsml:value>

      </dsml:attr>

    </data>

  </psp:pso>

</psp:calcResponse>

2015-02-26 12:58:56,803: [main] INFO  PspCLI.run(146) -  - End of psp execution : 275 ms

 

 

Any tips, help, ideas will be greatly appreciated!

Thanks,

Niva

 

Niva Agmon

Temple University

O: 215-204-2680

C: 267-608-8317

 

 

 

 

--

David Langenberg

Identity & Access Management

The University of Chicago

 

--

David Langenberg

Identity & Access Management

The University of Chicago

--

David Langenberg

Identity & Access Management

The University of Chicago