Grouper Users - Open Discussion List

[David Langenberg <>]

Yep, you're right.  Filed: https://bugs.internet2.edu/jira/browse/GRP-1141 to address it.

Dave

On Tue, Jun 16, 2015 at 3:58 PM, Jeff McCullough <> wrote:

Hi Dave,

It is true there are many script attributes in the psp-resolver, but none of which I added. For example:

 <!-- The stem objectclass attribute. If a change log entry is resolved, do not return dependencies from the static data

    connector. -->

  <resolver:AttributeDefinition

    id="stemObjectclass"

    xsi:type="ad:Script">

    <resolver:Dependency ref="StaticDataConnector" />

    <resolver:Dependency ref="UpdateStemNameChangeLogDataConnector" />

    <resolver:Dependency ref="UpdateStemDescriptionChangeLogDataConnector" />

    <!-- <resolver:Dependency ref="StemAttributeAssignValueChangeLogDataConnector" /> -->

    <ad:Script><![CDATA[

        // Import Shibboleth attribute provider.

        importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);

        // Create the attribute to be returned.

        stemObjectclass = new BasicAttribute("stemObjectclass");

        // Include values from 'staticStemObjectclass' if a change log entry is not being processed.

        if (typeof changeLogCategory != "undefined" && changeLogCategory != null) {

            // return nothing

        } else {

            stemObjectclass.getValues().addAll(staticStemObjectclass.getValues());

        }

    ]]></ad:Script>

  </resolver:AttributeDefinition>

Yes, I can make the changes to my files, but was thinking that you might be doing it as well for general distribution. :)

Jeff

On Jun 16, 2015, at 1:03 PM, David Langenberg <> wrote:

Looks like you have some scripted attributes in psp-resolver.xml.  Please look at:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPJava1.8

For what to do to migrate those forward.

Dave

On Mon, Jun 15, 2015 at 1:08 PM, Jeff McCullough <> wrote:

Hi,

Recently I’m seeing these PSP related errors. We are now running Java 1.8. Is that the likely culprit?

Jeff

—————————

error log

—————————————

2015-06-15 11:57:01,918: [DefaultQuartzScheduler_Worker-2] DEBUG PsoIdentifierAttributeDefinition.doResolve(50) -  - PSOIdentifier attribute definition 'memberDn' - Resolve principal 'change_log_sequence_number:2880873'

2015-06-15 11:57:01,918: [DefaultQuartzScheduler_Worker-2] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupDn' - Resolve

 principal 'change_log_sequence_number:2880873'

2015-06-15 11:57:01,942: [DefaultQuartzScheduler_Worker-2] ERROR ScriptedAttributeDefinition.doResolve(135) -  - ScriptletAttributeDefinition changeLogMembershipLdapSubjectId unable to execute script

javax.script.ScriptException: ReferenceError: "importPackage" is not defined in <eval> at line number 2

        at jdk.nashorn.api.scripting.NashornScriptEngine.throwAsScriptException(NashornScriptEngine.java:455)

        at jdk.nashorn.api.scripting.NashornScriptEngine.evalImpl(NashornScriptEngine.java:416)

        at jdk.nashorn.api.scripting.NashornScriptEngine.access$300(NashornScriptEngine.java:70)

        at jdk.nashorn.api.scripting.NashornScriptEngine$3.eval(NashornScriptEngine.java:499)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ScriptedAttributeDefinition.doResolve(ScriptedAttributeDefinition.java:122)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.BaseAttributeDefinition.resolve(BaseAttributeDefinition.java:108)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.BaseAttributeDefinition.resolve(BaseAttributeDefinition.java:39)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ContextualAttributeDefinition.resolve(ContextualAttributeDefinition.java:93)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ContextualAttributeDefinition.resolve(ContextualAttributeDefinition.java:33)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver.resolveAttribute(ShibbolethAttributeResolver.java:335)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver.resolveAttributes(ShibbolethAttributeResolver.java:284)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver.resolveAttributes(ShibbolethAttributeResolver.java:131)

        at edu.internet2.middleware.psp.shibboleth.SimpleAttributeAuthority.getAttributes(SimpleAttributeAuthority.java:96)

        at edu.internet2.middleware.psp.shibboleth.SimpleAttributeAuthority.getAttributes(SimpleAttributeAuthority.java:39)

        at edu.internet2.middleware.psp.Psp.execute(Psp.java:1083)

        at edu.internet2.middleware.psp.Psp.execute(Psp.java:1004)

        at edu.internet2.middleware.psp.Psp.execute(Psp.java:964)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processModification(PspChangeLogConsumer.java:807)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processMembershipAdd(PspChangeLogConsumer.java:708)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer$EventType$6.process(PspChangeLogConsumer.java:126)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntry(PspChangeLogConsumer.java:570)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntries(PspChangeLogConsumer.java:497)

        at edu.internet2.middleware.grouper.changeLog.ChangeLogHelper.processRecords(ChangeLogHelper.java:242)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderType$4.runJob(GrouperLoaderType.java:606)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:413)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:315)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)

Caused by: <eval>:2 ReferenceError: "importPackage" is not defined

        at jdk.nashorn.internal.runtime.ECMAErrors.error(ECMAErrors.java:57)

        at jdk.nashorn.internal.runtime.ECMAErrors.referenceError(ECMAErrors.java:319)

        at jdk.nashorn.internal.runtime.ECMAErrors.referenceError(ECMAErrors.java:291)

        at jdk.nashorn.internal.objects.Global.__noSuchProperty__(Global.java:914)

        at jdk.nashorn.internal.scripts.Script$1$\^eval\_.:program(<eval>:2)

        at jdk.nashorn.internal.runtime.ScriptFunctionData.invoke(ScriptFunctionData.java:636)

        at jdk.nashorn.internal.runtime.ScriptFunction.invoke(ScriptFunction.java:229)

        at jdk.nashorn.internal.runtime.ScriptRuntime.apply(ScriptRuntime.java:387)

        at jdk.nashorn.api.scripting.NashornScriptEngine.evalImpl(NashornScriptEngine.java:414)

        ... 26 more

2015-06-15 11:57:01,943: [DefaultQuartzScheduler_Worker-2] ERROR Psp.execute(1026) -  - Psp 'psp' - Calc CalcResponse[id=change_log_sequence_number:2880873,status=failure,error=customError,errorMessages={ScriptletAttributeDe

finition changeLogMembershipLdapSubjectId unable to execute script},requestID=2015/06/15-11:57:01.833]

2015-06-15 11:57:01,944: [DefaultQuartzScheduler_Worker-2] ERROR Psp.execute(1028) -  - Psp 'psp' - Calc XML:

<psp:calcResponse xmlns:psp='http://grouper.internet2.edu/psp' status='failure' requestID='2015/06/15-11:57:01.833' error='customError'>

  <errorMessage>ScriptletAttributeDefinition changeLogMembershipLdapSubjectId unable to execute script</errorMessage>

  <psp:id ID='change_log_sequence_number:2880873'/>

</psp:calcResponse>

--

David Langenberg

Identity & Access Management Architect

The University of Chicago

--

David Langenberg

Identity & Access Management Architect

The University of Chicago