grouper-users - Re: [grouper-users] group memebership is not provisioned to LDAP
Subject: Grouper Users - Open Discussion List
List archive
- From: David Langenberg <>
- To: Andrew Morgan <>
- Cc: Niva Agmon <>, "" <>
- Subject: Re: [grouper-users] group memebership is not provisioned to LDAP
- Date: Wed, 4 Mar 2015 19:11:52 -0700
Yeah, to close the loop, he did get it working after a bit of off-list config work.
Dave
On Wed, Mar 4, 2015 at 5:51 PM, Andrew Morgan <> wrote:
The PSP is a complicated beast! I've been working on it for a while, and I still don't understand how it all fits together. :)
Did you start from one of the psp-examples provided? The errors you are seeing make me think that the DataConnectors in psp-resolver.xml aren't working. Did you configure ldap.properties fully?
Andy
On Thu, 26 Feb 2015, Niva Agmon wrote:
<mailto:>Hello all,
I'm trying to provision a test group from grouper to ldap and the group is created in LDAP without the membership.
Command:
gsh -psp -calc PSP:test2 -returnEverything
The errors are the following. Not sure what they refer to and which attributes are missing:
- - Pso reference 'membersLdap' - Source attribute does not exist
-- PsoReference.getReferences(97) - - Pso reference 'membersGsa' - Source attribute does not exist
-- PSO Identifier Definition 'memberDN' - Source attribute 'memberDN' does not exist
--- DEBUG Pso.getPSO(229) - - Pso 'member' - Unable to calculate pso identifier for 'PSP:test2'
2015-02-26 12:58:56,744: [main] DEBUG Psp.execute(1084) - - PSP 'psp' - Calc CalcRequest[id=PSP:test2,requestID=<null>,returnData=everything] Resolved attributes '[groupDescription, cn, groupDn]'.
2015-02-26 12:58:56,744: [main] DEBUG Pso.getPSO(222) - - Pso 'group' - Get pso for 'PSP:test2'
2015-02-26 12:58:56,744: [main] DEBUG PsoIdentifier.getPSOIdentifier(114) - - PSO Identifier Definition 'groupDn' - Returned 'PSOIdentifier[id='cn=PSP:test2,ou=groups,dc=temple,dc=edu',targetID=ldap,containerID=<null>]'
2015-02-26 12:58:56,783: [main] DEBUG PsoReferences.getReferences(148) - - Pso references 'member' - Get references for 'PSP:test2'
2015-02-26 12:58:56,785: [main] DEBUG PsoReference.getReferences(90) - - Pso reference 'membersLdap' - Get references for 'PSP:test2'
2015-02-26 12:58:56,785: [main] DEBUG PsoReference.getReferences(97) - - Pso reference 'membersLdap' - Source attribute does not exist
2015-02-26 12:58:56,786: [main] DEBUG PsoReference.getReferences(90) - - Pso reference 'membersGsa' - Get references for 'PSP:test2'
2015-02-26 12:58:56,788: [main] DEBUG PsoReference.getReferences(97) - - Pso reference 'membersGsa' - Source attribute does not exist
2015-02-26 12:58:56,788: [main] DEBUG PsoReferences.getReferences(160) - - Pso references 'member' - Returned 0 references.
2015-02-26 12:58:56,789: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) - - PSO Identifier Definition 'groupDn' - Source attribute 'groupDnAlternate' does not exist
2015-02-26 12:58:56,790: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) - - PSO Identifier Definition 'groupDn' - Source attribute 'groupDnAlternateChangeLog' does not exist
2015-02-26 12:58:56,794: [main] DEBUG Pso.getPSO(282) - - Pso 'group' - Get pso for 'PSP:test2' returned 1 objects.
2015-02-26 12:58:56,796: [main] DEBUG Pso.getPSO(222) - - Pso 'member' - Get pso for 'PSP:test2'
2015-02-26 12:58:56,797: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) - - PSO Identifier Definition 'memberDN' - Source attribute 'memberDN' does not exist
2015-02-26 12:58:56,797: [main] DEBUG Pso.getPSO(229) - - Pso 'member' - Unable to calculate pso identifier for 'PSP:test2'
2015-02-26 12:58:56,798: [main] DEBUG Pso.getPSO(222) - - Pso 'groupMembership' - Get pso for 'PSP:test2'
2015-02-26 12:58:56,799: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) - - PSO Identifier Definition 'changeLogMembershipGroupDn' - Source attribute 'changeLogMembershipGroupDn' does not exist
2015-02-26 12:58:56,799: [main] DEBUG Pso.getPSO(229) - - Pso 'groupMembership' - Unable to calculate pso identifier for 'PSP:test2'
2015-02-26 12:58:56,801: [main] INFO Psp.execute(1009) - - Psp 'psp' - Calc CalcResponse[id=PSP:test2,status=success,requestID=2015/02/26-12:58:56.542,pso=PSO[psoID=PSOIdentifier[id='cn=PSP:test2,ou=groups,dc=temple,dc=edu',targetID=ldap,containerID=<null>]]]
2015-02-26 12:58:56,802: [main] INFO Psp.execute(1011) - - Psp 'psp' - Calc XML:
<psp:calcResponse xmlns:psp='http://grouper.internet2.edu/psp' status='success' requestID='2015/02/26-12:58:56.542'>
<psp:id ID='PSP:test2'/>
<psp:pso entityName='group'>
<psoID ID='cn=PSP:test2,ou=groups,dc=temple,dc=edu' targetID='ldap'/>
<data>
<dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='cn'>
<dsml:value>PSP:test2</dsml:value>
</dsml:attr>
<dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='description'>
<dsml:value>test group from grouper</dsml:value>
</dsml:attr>
</data>
</psp:pso>
</psp:calcResponse>
2015-02-26 12:58:56,803: [main] INFO PspCLI.run(146) - - End of psp execution : 275 ms
Any tips, help, ideas will be greatly appreciated!
Thanks,
Niva
Niva Agmon
Temple University
O: 215-204-2680
C: 267-608-8317
David Langenberg
Identity & Access Management
The University of Chicago
- Re: [grouper-users] group memebership is not provisioned to LDAP, Andrew Morgan, 03/05/2015
- Re: [grouper-users] group memebership is not provisioned to LDAP, David Langenberg, 03/05/2015
Archive powered by MHonArc 2.6.16.