Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] RE: Help required, error deleting groups -- PSPNG

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] RE: Help required, error deleting groups -- PSPNG

Chronological Thread 
  • From: James Babb <>
  • To: Shaun Koh <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] RE: Help required, error deleting groups -- PSPNG
  • Date: Fri, 09 Sep 2016 16:07:11 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23:+sKHqBCrbirL+VUZBGpxUyQJP3N1i/DPJgcQr6AfoPdwSP3yoMbcNUDSrc9gkEXOFd2Crakb26yL6Ou5BCQp2tWojjMrSNR0TRgLiMEbzUQLIfWuLgnFFsPsdDEwB89YVVVorDmROElRH9viNRWJ+iXhpRZbIBj0NBJ0K+LpAcaSyp3vj6Hhs6HUNj5IjSe7KZB1LF3itgXYq89QgoxiAq8swRjNq31EPe1dg2V6cwG9hRH5s+W5+ZN4uw5Zsfhpo8xJVKjhOa4xR7ZwEzU9OCY46NC95kqLdheG+nZJCjZeqRFPGQWQqUiiBpo=
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99



Wondering if you had ever solved either of these issues.  I ran in to both of these today while experimenting around with PSPNG. Same errors as logged below.



James Babb

Enterprise Identity Management Technologist

Division of Information Technology

University of Wisconsin-Madison



From: <> on behalf of Shaun Koh <>
Date: Tuesday, August 23, 2016 at 6:03 AM
To: "" <>
Subject: [grouper-users] RE: Help required, error deleting groups -- PSPNG


Hi there,


Thought I’d bump this thread and to extend it.


In addition to the issue below, I’ve run into another regarding the provisioning of nested groups via the PSPNG. – please let me know if this should be in a separate thread


Regarding the latter, I would like to know if there is a recommended approach for handling nested group memberships ? -- it seems the PSPNG is currently defaulting to using the nested group’s UUID as a subject lookup which causes errors when querying AD for a blank/null user and trying to get it’s DN from the Users OU


Let me know if you require further information or some log traces.


Thank You,

Shaun K.


From: Shaun Koh
Sent: Thursday, 18 August 2016 6:56 p.m.
Subject: Help required, error deleting groups -- PSPNG


Hi there,


I have run into an issue related to PSPNG regarding deletion of groups that have the `provision_to` or `do_not_provison_to` attributes assigned or are within a folder that have been assigned the attributes.


The error below seems to occur whenever I try to delete a group that has an existing or previously existed member that was processed/provisioned by PSPNG. – it doesn’t seem to occur for groups that never had a member


I’m not quite sure what is causing this error however it does prevent the sequence of the PSPNG changelog consumer from progressing. – currently I have to manually edit the sequence number in the DB to skip the error which is clearly not a good practice


Please let me know if you require further information or clarification.


Thank you,

Shaun K.




2016-08-18 18:23:56,024: [DefaultQuartzScheduler_Worker-3] DEBUG Provisioner.evaluateJexlExpression(479) -  - Evaluating Jexl _expression_: ${utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to'])}

2016-08-18 18:23:56,024: [DefaultQuartzScheduler_Worker-3] ERROR ChangeLogHelper.processRecords(252) -  - Error

edu.internet2.middleware.grouper.exception.ExpressionLanguageMissingVariableException: variable 'stemAttributes' is not defined in script: 'utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to'])'

        at edu.internet2.middleware.grouper.util.GrouperUtil.substituteExpressionLanguage(

        at edu.internet2.middleware.grouper.pspng.Provisioner.evaluateJexlExpression(

        at edu.internet2.middleware.grouper.pspng.Provisioner.shouldGroupBeProvisioned(

        at edu.internet2.middleware.grouper.pspng.Provisioner.filterWorkItems(

        at edu.internet2.middleware.grouper.pspng.Provisioner.provisionBatchOfItems(

        at edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim.processChangeLogEntries(

        at edu.internet2.middleware.grouper.changeLog.ChangeLogHelper.processRecords(





        at org.quartz.simpl.SimpleThreadPool$

Caused by: org.apache.commons.jexl2.JexlException: ]: 'utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to']);' undefined variable stemAttributes

        at org.apache.commons.jexl2.Interpreter.visit(

        at org.apache.commons.jexl2.parser.ASTIdentifier.jjtAccept(

        at org.apache.commons.jexl2.Interpreter.visit(

        at org.apache.commons.jexl2.parser.ASTArrayAccess.jjtAccept(

        at org.apache.commons.jexl2.Interpreter.visit(

        at org.apache.commons.jexl2.parser.ASTReference.jjtAccept(

        at org.apache.commons.jexl2.Interpreter.visit(

        at org.apache.commons.jexl2.parser.ASTMethodNode.jjtAccept(

        at org.apache.commons.jexl2.Interpreter.visit(

        at org.apache.commons.jexl2.parser.ASTReference.jjtAccept(

        at org.apache.commons.jexl2.Interpreter.visit(

        at org.apache.commons.jexl2.parser.ASTAndNode.jjtAccept(

        at org.apache.commons.jexl2.Interpreter.interpret(

        at org.apache.commons.jexl2.ExpressionImpl.evaluate(

        at edu.internet2.middleware.grouper.util.GrouperUtil.substituteExpressionLanguage(

        ... 11 more


Archive powered by MHonArc 2.6.19.

Top of Page