Grouper Users - Open Discussion List

[Shaun Koh <>]

Hi there,

 

Thought I’d bump this thread and to extend it.

 

In addition to the issue below, I’ve run into another regarding the provisioning of nested groups via the PSPNG. – please let me know if this should be in a separate thread

 

Regarding the latter, I would like to know if there is a recommended approach for handling nested group memberships ? -- it seems the PSPNG is currently defaulting to using the nested group’s UUID as a subject lookup which causes errors when querying AD for a blank/null user and trying to get it’s DN from the Users OU

 

Let me know if you require further information or some log traces.

 

Thank You,

Shaun K.

 

From: Shaun Koh
Sent: Thursday, 18 August 2016 6:56 p.m.
To:
Subject: Help required, error deleting groups -- PSPNG

 

Hi there,

 

I have run into an issue related to PSPNG regarding deletion of groups that have the `provision_to` or `do_not_provison_to` attributes assigned or are within a folder that have been assigned the attributes.

 

The error below seems to occur whenever I try to delete a group that has an existing or previously existed member that was processed/provisioned by PSPNG. – it doesn’t seem to occur for groups that never had a member

 

I’m not quite sure what is causing this error however it does prevent the sequence of the PSPNG changelog consumer from progressing. – currently I have to manually edit the sequence number in the DB to skip the error which is clearly not a good practice

 

Please let me know if you require further information or clarification.

 

Thank you,

Shaun K.

 

##LOG##

 

2016-08-18 18:23:56,024: [DefaultQuartzScheduler_Worker-3] DEBUG Provisioner.evaluateJexlExpression(479) -  - Evaluating Jexl _expression_: ${utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to'])}

2016-08-18 18:23:56,024: [DefaultQuartzScheduler_Worker-3] ERROR ChangeLogHelper.processRecords(252) -  - Error

edu.internet2.middleware.grouper.exception.ExpressionLanguageMissingVariableException: variable 'stemAttributes' is not defined in script: 'utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to'])'

        at edu.internet2.middleware.grouper.util.GrouperUtil.substituteExpressionLanguage(GrouperUtil.java:9275)

        at edu.internet2.middleware.grouper.pspng.Provisioner.evaluateJexlExpression(Provisioner.java:500)

        at edu.internet2.middleware.grouper.pspng.Provisioner.shouldGroupBeProvisioned(Provisioner.java:1079)

        at edu.internet2.middleware.grouper.pspng.Provisioner.filterWorkItems(Provisioner.java:413)

        at edu.internet2.middleware.grouper.pspng.Provisioner.provisionBatchOfItems(Provisioner.java:1114)

        at edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim.processChangeLogEntries(PspChangelogConsumerShim.java:71)

        at edu.internet2.middleware.grouper.changeLog.ChangeLogHelper.processRecords(ChangeLogHelper.java:242)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderType$4.runJob(GrouperLoaderType.java:629)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:416)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:318)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

Caused by: org.apache.commons.jexl2.JexlException: ]: 'utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to']);' undefined variable stemAttributes

        at org.apache.commons.jexl2.Interpreter.visit(Interpreter.java:689)

        at org.apache.commons.jexl2.parser.ASTIdentifier.jjtAccept(ASTIdentifier.java:18)

        at org.apache.commons.jexl2.Interpreter.visit(Interpreter.java:345)

        at org.apache.commons.jexl2.parser.ASTArrayAccess.jjtAccept(ASTArrayAccess.java:18)

        at org.apache.commons.jexl2.Interpreter.visit(Interpreter.java:1045)

        at org.apache.commons.jexl2.parser.ASTReference.jjtAccept(ASTReference.java:18)

        at org.apache.commons.jexl2.Interpreter.visit(Interpreter.java:808)

        at org.apache.commons.jexl2.parser.ASTMethodNode.jjtAccept(ASTMethodNode.java:18)

        at org.apache.commons.jexl2.Interpreter.visit(Interpreter.java:1045)

        at org.apache.commons.jexl2.parser.ASTReference.jjtAccept(ASTReference.java:18)

        at org.apache.commons.jexl2.Interpreter.visit(Interpreter.java:321)

        at org.apache.commons.jexl2.parser.ASTAndNode.jjtAccept(ASTAndNode.java:18)

        at org.apache.commons.jexl2.Interpreter.interpret(Interpreter.java:162)

        at org.apache.commons.jexl2.ExpressionImpl.evaluate(ExpressionImpl.java:64)

        at edu.internet2.middleware.grouper.util.GrouperUtil.substituteExpressionLanguage(GrouperUtil.java:9261)

        ... 11 more