Subject: Grouper Users - Open Discussion List
- From: Dave Churchley <>
- To: "Bee-Lindgren, Bert A" <>, "" <>
- Subject: [grouper-users] PSP bulkSync problems
- Date: Tue, 15 Dec 2015 10:46:56 +0000
- Accept-language: en-GB, en-US
- Authentication-results: spf=none (sender IP is ) ;
- Spamdiagnosticmetadata: NSPM
- Spamdiagnosticoutput: 1:23
We went ahead and moved to v2.2.2 over the weekend and yesterday started off
a psp bulkSync with AD. This ran for over 24 hours with no signs of reaching
We've also noticed about 200 instances of the following error which we're
assuming is being caused by a timeout:
WARN PsoReference.getReferences(137) - - Pso reference 'membersLdap' -
Unable to resolve identifier
This has meant that some users have been removed from groups incorrectly -
the users are in AD and haven't been removed from all the groups they're a
member of. We've now stopped the bulkSync before it removes more people from
We're considering our options for what to do next. Any ideas would be welcome!
At the moment, the plan is to individually sync the groups that we know have
been affected by the above issue and then switch on real time psp
provisioning and allow users back onto the system. There are still a number
of large groups (15000+ members) that we know the bulkSync didn't get around
to syncing. Is it safe to try to sync these groups individually whilst the
real time provisioning is running?
I'd appreciate any help or advice anyone can offer.
> On Behalf Of Dave Churchley
>Sent: 03 December 2015 16:36
>To: Bee-Lindgren, Bert A
>Subject: [grouper-users] RE: Very slow PSP bulkSync in 2.2.2
>Any help you can give us would be greatly appreciated.
>For info, we're using a MySQL database and have about 7000 groups
>provisioning to AD. I've attached the relevant conf files.
>>From: Bee-Lindgren, Bert A
>>Sent: 03 December 2015 15:55
>>To: Dave Churchley
>>Subject: Re: Very slow PSP bulkSync in 2.2.2
>>I'll be happy to help with this. I'm focusing on the next generation of
>>I'm only a 70% expert in the 2.2.2 version. Therefore, it may take a few
>>back and forth, but I'll do my best to reach your historical performance.
>>Let's start here:
>>What are your LDAP-connection parameters (masking private details, of
>> on behalf of Dave Churchley
>>Sent: Thursday, December 3, 2015 10:21 AM
>>Subject: [grouper-users] Very slow PSP bulkSync in 2.2.2
>>I'm working on Grouper at Newcastle University where we've been running
>>1.6.3 for many years now. We're planning to upgrade to 2.2.2 soon, with real
>>time PSP provisioning to AD backed up with a bulkSync overnight.
>>In the testing we've done so far, the bulkSync consistently takes about 6
>>hours to run which is a lot longer than we'd like. We've tried various
>>speed this up, including increasing the available memory and adjusting the
>>settings in ehcache.xml (as described in training video 4,
>>Our current 1.6.3 setup takes about 2 hours to provision to AD using the old
>>ldappc method, so 6 hours seems like a very long time to us. Does anyone
>>have any suggestions of how we can reduce this, please?
>>Thanks in advance for any help!
- [grouper-users] PSP bulkSync problems, Dave Churchley, 12/15/2015
- [grouper-users] Re: PSP bulkSync problems, Bee-Lindgren, Bert A, 12/15/2015
Archive powered by MHonArc 2.6.16.