Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] group memebership is not provisioned to LDAP

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] group memebership is not provisioned to LDAP


Chronological Thread 
  • From: David Langenberg <>
  • To: Andrew Morgan <>
  • Cc: Niva Agmon <>, "" <>
  • Subject: Re: [grouper-users] group memebership is not provisioned to LDAP
  • Date: Wed, 4 Mar 2015 19:11:52 -0700

Yeah, to close the loop, he did get it working after a bit of off-list config work.

Dave

On Wed, Mar 4, 2015 at 5:51 PM, Andrew Morgan <> wrote:
The PSP is a complicated beast!  I've been working on it for a while, and I still don't understand how it all fits together.  :)

Did you start from one of the psp-examples provided?  The errors you are seeing make me think that the DataConnectors in psp-resolver.xml aren't working.  Did you configure ldap.properties fully?

        Andy


On Thu, 26 Feb 2015, Niva Agmon wrote:

Hello all,

I'm trying to provision a test group from grouper to ldap and the group is created in LDAP without the membership.

Command:
gsh -psp -calc PSP:test2 -returnEverything

The  errors are the following. Not sure what they refer to and which attributes are missing:
-  - Pso reference 'membersLdap' - Source attribute does not exist
-- PsoReference.getReferences(97) -  - Pso reference 'membersGsa' - Source attribute does not exist
-- PSO Identifier Definition 'memberDN' - Source attribute 'memberDN' does not exist
--- DEBUG Pso.getPSO(229) -  - Pso 'member' - Unable to calculate pso identifier for 'PSP:test2'


2015-02-26 12:58:56,744: [main] DEBUG Psp.execute(1084) -  - PSP 'psp' - Calc CalcRequest[id=PSP:test2,requestID=<null>,returnData=everything] Resolved attributes '[groupDescription, cn, groupDn]'.
2015-02-26 12:58:56,744: [main] DEBUG Pso.getPSO(222) -  - Pso 'group' - Get pso for 'PSP:test2'
2015-02-26 12:58:56,744: [main] DEBUG PsoIdentifier.getPSOIdentifier(114) -  - PSO Identifier Definition 'groupDn' - Returned 'PSOIdentifier[id='cn=PSP:test2,ou=groups,dc=temple,dc=edu',targetID=ldap,containerID=<null>]'
2015-02-26 12:58:56,783: [main] DEBUG PsoReferences.getReferences(148) -  - Pso references 'member' - Get references for 'PSP:test2'
2015-02-26 12:58:56,785: [main] DEBUG PsoReference.getReferences(90) -  - Pso reference 'membersLdap' - Get references for 'PSP:test2'
2015-02-26 12:58:56,785: [main] DEBUG PsoReference.getReferences(97) -  - Pso reference 'membersLdap' - Source attribute does not exist
2015-02-26 12:58:56,786: [main] DEBUG PsoReference.getReferences(90) -  - Pso reference 'membersGsa' - Get references for 'PSP:test2'
2015-02-26 12:58:56,788: [main] DEBUG PsoReference.getReferences(97) -  - Pso reference 'membersGsa' - Source attribute does not exist
2015-02-26 12:58:56,788: [main] DEBUG PsoReferences.getReferences(160) -  - Pso references 'member' - Returned 0 references.
2015-02-26 12:58:56,789: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'groupDn' - Source attribute 'groupDnAlternate' does not exist
2015-02-26 12:58:56,790: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'groupDn' - Source attribute 'groupDnAlternateChangeLog' does not exist
2015-02-26 12:58:56,794: [main] DEBUG Pso.getPSO(282) -  - Pso 'group' - Get pso for 'PSP:test2' returned 1 objects.
2015-02-26 12:58:56,796: [main] DEBUG Pso.getPSO(222) -  - Pso 'member' - Get pso for 'PSP:test2'
2015-02-26 12:58:56,797: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'memberDN' - Source attribute 'memberDN' does not exist
2015-02-26 12:58:56,797: [main] DEBUG Pso.getPSO(229) -  - Pso 'member' - Unable to calculate pso identifier for 'PSP:test2'
2015-02-26 12:58:56,798: [main] DEBUG Pso.getPSO(222) -  - Pso 'groupMembership' - Get pso for 'PSP:test2'
2015-02-26 12:58:56,799: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipGroupDn' - Source attribute 'changeLogMembershipGroupDn' does not exist
2015-02-26 12:58:56,799: [main] DEBUG Pso.getPSO(229) -  - Pso 'groupMembership' - Unable to calculate pso identifier for 'PSP:test2'
2015-02-26 12:58:56,801: [main] INFO  Psp.execute(1009) -  - Psp 'psp' - Calc CalcResponse[id=PSP:test2,status=success,requestID=2015/02/26-12:58:56.542,pso=PSO[psoID=PSOIdentifier[id='cn=PSP:test2,ou=groups,dc=temple,dc=edu',targetID=ldap,containerID=<null>]]]
2015-02-26 12:58:56,802: [main] INFO  Psp.execute(1011) -  - Psp 'psp' - Calc XML:
<psp:calcResponse xmlns:psp='http://grouper.internet2.edu/psp' status='success' requestID='2015/02/26-12:58:56.542'>
 <psp:id ID='PSP:test2'/>
 <psp:pso entityName='group'>
   <psoID ID='cn=PSP:test2,ou=groups,dc=temple,dc=edu' targetID='ldap'/>
   <data>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='cn'>
       <dsml:value>PSP:test2</dsml:value>
     </dsml:attr>
     <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='description'>
       <dsml:value>test group from grouper</dsml:value>
     </dsml:attr>
   </data>
 </psp:pso>
</psp:calcResponse>
2015-02-26 12:58:56,803: [main] INFO  PspCLI.run(146) -  - End of psp execution : 275 ms


Any tips, help, ideas will be greatly appreciated!
Thanks,
Niva

Niva Agmon
Temple University
O: 215-204-2680
C: 267-608-8317
<mailto:>







--
David Langenberg
Identity & Access Management
The University of Chicago



Archive powered by MHonArc 2.6.16.

Top of Page