Grouper Users - Open Discussion List

[David Langenberg <>]

That is true, and we did discuss that on the call, but it was decided not to take on the extra support & maintenance burden of maintaining two sets of example configuration files for a product that we feel is end-of-life.

Dave

On Thu, Jun 18, 2015 at 12:35 PM, Jeff McCullough <> wrote:

It is possible to make the resolver work with both versions if you wanted to go that route. It is in the link you provided.

Jeff

On Jun 17, 2015, at 9:58 AM, David Langenberg <> wrote:

Hi,

We talked about this on the call today and the official line is that Grouper 2.2.x is targeted for Java 7.  While it may work under Java 8, any issues encountered by a deployer will need to be worked-around by that deployer.  The next major release of Grouper will support Java 8.  In the meantime, we will be updating the PSP to watch for this particular exception & give a more helpful message in the logs about what to do to work-around the issue.

Dave

On Tue, Jun 16, 2015 at 4:02 PM, David Langenberg <> wrote:

Yep, you're right.  Filed: https://bugs.internet2.edu/jira/browse/GRP-1141 to address it.

Dave

On Tue, Jun 16, 2015 at 3:58 PM, Jeff McCullough <> wrote:

Hi Dave,

It is true there are many script attributes in the psp-resolver, but none of which I added. For example:

 <!-- The stem objectclass attribute. If a change log entry is resolved, do not return dependencies from the static data

    connector. -->

  <resolver:AttributeDefinition

    id="stemObjectclass"

    xsi:type="ad:Script">

    <resolver:Dependency ref="StaticDataConnector" />

    <resolver:Dependency ref="UpdateStemNameChangeLogDataConnector" />

    <resolver:Dependency ref="UpdateStemDescriptionChangeLogDataConnector" />

    <!-- <resolver:Dependency ref="StemAttributeAssignValueChangeLogDataConnector" /> -->

    <ad:Script><![CDATA[

        // Import Shibboleth attribute provider.

        importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);

        // Create the attribute to be returned.

        stemObjectclass = new BasicAttribute("stemObjectclass");

        // Include values from 'staticStemObjectclass' if a change log entry is not being processed.

        if (typeof changeLogCategory != "undefined" && changeLogCategory != null) {

            // return nothing

        } else {

            stemObjectclass.getValues().addAll(staticStemObjectclass.getValues());

        }

    ]]></ad:Script>

  </resolver:AttributeDefinition>

Yes, I can make the changes to my files, but was thinking that you might be doing it as well for general distribution. :)

Jeff

On Jun 16, 2015, at 1:03 PM, David Langenberg <> wrote:

Looks like you have some scripted attributes in psp-resolver.xml.  Please look at:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPJava1.8

For what to do to migrate those forward.

Dave

On Mon, Jun 15, 2015 at 1:08 PM, Jeff McCullough <> wrote:

Hi,

Recently I’m seeing these PSP related errors. We are now running Java 1.8. Is that the likely culprit?

Jeff

—————————

error log

—————————————

2015-06-15 11:57:01,918: [DefaultQuartzScheduler_Worker-2] DEBUG PsoIdentifierAttributeDefinition.doResolve(50) -  - PSOIdentifier attribute definition 'memberDn' - Resolve principal 'change_log_sequence_number:2880873'

2015-06-15 11:57:01,918: [DefaultQuartzScheduler_Worker-2] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupDn' - Resolve

 principal 'change_log_sequence_number:2880873'

2015-06-15 11:57:01,942: [DefaultQuartzScheduler_Worker-2] ERROR ScriptedAttributeDefinition.doResolve(135) -  - ScriptletAttributeDefinition changeLogMembershipLdapSubjectId unable to execute script

javax.script.ScriptException: ReferenceError: "importPackage" is not defined in <eval> at line number 2

        at jdk.nashorn.api.scripting.NashornScriptEngine.throwAsScriptException(NashornScriptEngine.java:455)

        at jdk.nashorn.api.scripting.NashornScriptEngine.evalImpl(NashornScriptEngine.java:416)

        at jdk.nashorn.api.scripting.NashornScriptEngine.access$300(NashornScriptEngine.java:70)

        at jdk.nashorn.api.scripting.NashornScriptEngine$3.eval(NashornScriptEngine.java:499)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ScriptedAttributeDefinition.doResolve(ScriptedAttributeDefinition.java:122)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.BaseAttributeDefinition.resolve(BaseAttributeDefinition.java:108)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.BaseAttributeDefinition.resolve(BaseAttributeDefinition.java:39)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ContextualAttributeDefinition.resolve(ContextualAttributeDefinition.java:93)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.attributeDefinition.ContextualAttributeDefinition.resolve(ContextualAttributeDefinition.java:33)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver.resolveAttribute(ShibbolethAttributeResolver.java:335)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver.resolveAttributes(ShibbolethAttributeResolver.java:284)

        at edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver.resolveAttributes(ShibbolethAttributeResolver.java:131)

        at edu.internet2.middleware.psp.shibboleth.SimpleAttributeAuthority.getAttributes(SimpleAttributeAuthority.java:96)

        at edu.internet2.middleware.psp.shibboleth.SimpleAttributeAuthority.getAttributes(SimpleAttributeAuthority.java:39)

        at edu.internet2.middleware.psp.Psp.execute(Psp.java:1083)

        at edu.internet2.middleware.psp.Psp.execute(Psp.java:1004)

        at edu.internet2.middleware.psp.Psp.execute(Psp.java:964)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processModification(PspChangeLogConsumer.java:807)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processMembershipAdd(PspChangeLogConsumer.java:708)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer$EventType$6.process(PspChangeLogConsumer.java:126)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntry(PspChangeLogConsumer.java:570)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntries(PspChangeLogConsumer.java:497)

        at edu.internet2.middleware.grouper.changeLog.ChangeLogHelper.processRecords(ChangeLogHelper.java:242)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderType$4.runJob(GrouperLoaderType.java:606)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:413)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:315)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)

Caused by: <eval>:2 ReferenceError: "importPackage" is not defined

        at jdk.nashorn.internal.runtime.ECMAErrors.error(ECMAErrors.java:57)

        at jdk.nashorn.internal.runtime.ECMAErrors.referenceError(ECMAErrors.java:319)

        at jdk.nashorn.internal.runtime.ECMAErrors.referenceError(ECMAErrors.java:291)

        at jdk.nashorn.internal.objects.Global.__noSuchProperty__(Global.java:914)

        at jdk.nashorn.internal.scripts.Script$1$\^eval\_.:program(<eval>:2)

        at jdk.nashorn.internal.runtime.ScriptFunctionData.invoke(ScriptFunctionData.java:636)

        at jdk.nashorn.internal.runtime.ScriptFunction.invoke(ScriptFunction.java:229)

        at jdk.nashorn.internal.runtime.ScriptRuntime.apply(ScriptRuntime.java:387)

        at jdk.nashorn.api.scripting.NashornScriptEngine.evalImpl(NashornScriptEngine.java:414)

        ... 26 more

2015-06-15 11:57:01,943: [DefaultQuartzScheduler_Worker-2] ERROR Psp.execute(1026) -  - Psp 'psp' - Calc CalcResponse[id=change_log_sequence_number:2880873,status=failure,error=customError,errorMessages={ScriptletAttributeDe

finition changeLogMembershipLdapSubjectId unable to execute script},requestID=2015/06/15-11:57:01.833]

2015-06-15 11:57:01,944: [DefaultQuartzScheduler_Worker-2] ERROR Psp.execute(1028) -  - Psp 'psp' - Calc XML:

<psp:calcResponse xmlns:psp='http://grouper.internet2.edu/psp' status='failure' requestID='2015/06/15-11:57:01.833' error='customError'>

  <errorMessage>ScriptletAttributeDefinition changeLogMembershipLdapSubjectId unable to execute script</errorMessage>

  <psp:id ID='change_log_sequence_number:2880873'/>

</psp:calcResponse>

--

David Langenberg

Identity & Access Management Architect

The University of Chicago

--

David Langenberg

Identity & Access Management Architect

The University of Chicago

--

David Langenberg

Identity & Access Management Architect

The University of Chicago

--

David Langenberg

Identity & Access Management Architect

The University of Chicago