Grouper Users - Open Discussion List

[Julio Macavilca <>]

Hi folks,

Just bubbling up the email below and see if you there are any thoughts.  

Thanks,

Julio

On Tue, Jul 19, 2016 at 8:26 AM, Yoann Delattre <> wrote:

Hi,

here, I have the following problems

1. Updating a group's description not being sent over to LDAP (only on group creation, log ouput here)
2. Creating a group in a stem outside the groupSelectionExpression still creates the object in LDAP (no members are included, log output here)
3. Renaming a group is not sent over to LDAP (log output)
4. Creating a group with another group as a member fails then the changelog consumer is stuck (log output).  

Thanks,

Yoann

Yoann Delattre	✆	03 20 95 69 10	✉
Équipe SIAD (Systèmes d'Information et Aide à la Décision) DSI de l'académie de Lille (Direction des Systèmes d'Information) 110 avenue Gaston Berger - 59000 Lille

Le 14/07/2016 à 19:26, Julio Macavilca a écrit :

Hi,

I've come across a few issues when testing the pspng and enumerated them below with links to respective log messages for items 1 to 4.  The config is further down (ommitted ldapUrl, baseDn, bindDn, bindCredential).  The api,ws,ui are on 2.3.0 and and the changes were done with the ui.

Did somebody else come across these as well?

thanks,

Julio

1. Updating a group's description not being sent over to LDAP (only on group creation, log ouput here)
2. Creating a group in a stem outside the groupSelectionExpression still creates the object in LDAP (no members are included, log output here)
3. Renaming a group is not sent over to LDAP (log output)
4. Creating a group with another group as a member fails then the changelog consumer is stuck (log output).  
5. At times, I've seen that the full sync gets kicked off when the changelog has something to do but I haven't been able to reproduce it consistently. However, I don't see that the fullsync gets kicked off at the time specified in the config, maybe I am missing something?
6. On group creation or membership updates I keep seeing the warn message below and was wondering why is it at that level (this can also be found in the log files provided)
1. Logging a WARN (
      2016-07-06 21:19:00,673: [DefaultQuartzScheduler_Worker-6] WARN  PspChangelogConsumerShim.processChangeLogEntries(65) -  - Processing changelog entries: 2) 

######PSPNG######

changeLog.consumer.pspng_groupOfNames.class = edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim

changeLog.consumer.pspng_groupOfNames.type = edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner

changeLog.consumer.pspng_groupOfNames.quartzCron = 0 * * * * ?

changeLog.consumer.pspng_groupOfNames.fullSync.quartzCron = 0 30 9 * * ?

changeLog.consumer.pspng_groupOfNames.ldapPoolName = enterpriseldap

changeLog.consumer.pspng_groupOfNames.memberAttributeName = member

changeLog.consumer.pspng_groupOfNames.memberAttributeValueFormat = ${ldapUser.getDn()}

changeLog.consumer.pspng_groupOfNames.groupSearchBaseDn = ou=nyu,ou=groups,o=nyu.edu,o=nyu

changeLog.consumer.pspng_groupOfNames.allGroupsSearchFilter = objectclass=groupOfNames

changeLog.consumer.pspng_groupOfNames.singleGroupSearchFilter = (&(objectclass=groupOfNames)(entryDN=${utils.bushyDn(group.name, "cn", "ou")},ou=nyu,ou=groups,o=nyu.edu,o=nyu))

changeLog.consumer.pspng_groupOfNames.groupSearchAttributes  = entrydn,cn,objectclass,member

changeLog.consumer.pspng_groupOfNames.groupCreationLdifTemplate = dn: ${utils.bushyDn(group.name, "cn", "ou")}||objectclass: groupOfNames||description: ${group.description}

changeLog.consumer.pspng_groupOfNames.userSearchBaseDn = ou=people,o=nyu.edu,o=nyu

changeLog.consumer.pspng_groupOfNames.userSearchFilter = uid=${subject.id}

changeLog.consumer.pspng_groupOfNames.groupSelectionExpression=${name.startsWith("app:pspngtest:")}

ldap.enterpriseldap.searchResultPagingEnabled=false

###############