Is the email address the subject id or a subject identifier?
If so, I think if the query finds by id or identifier, it will
avoid the problem. Look at WsSubjectLookup.
Otherwise, if the email address is not an id/identifier, then
I believe the cache that you're running into is:
You can adjust those settings if you want, but just be aware
that it could result it more queries to your ldap and have a
performance hit.
Hi Shilen,
yes, I search for an user by email and if I don't find it I
create a new
LDAP account.
I paste some simplified code for testing.
Currently I set up a workaround loop which try to retrieve
the subject
multiple times, until it becames not null.
// --------------------------------------------------------
public class User {
private final String uid;
private final String email;
public User(String uid, String email) {
this.uid = uid;
this.email = email;
}
public String getUid() {
return uid;
}
public String getEmail() {
return email;
}
}
// --------------------------------------------------------
public class Util {
private static final Logger log =
Logger.getLogger(Util.class.getName());
private static DirContext getDirContext() throws
NamingException {
Hashtable<String, String> env = new
Hashtable<>();
env.put(Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.SECURITY_AUTHENTICATION,
"simple");
env.put(Context.SECURITY_PRINCIPAL,
"cn=Manager,dc=.....");
env.put(Context.SECURITY_CREDENTIALS, ".....");
return new InitialDirContext(env);
}
public static List<User> getUsersByEmail(String
emailAddress) {
GcGetSubjects gs = new GcGetSubjects();
gs.assignSearchString(emailAddress);
gs.addSubjectAttributeName("mail");
gs.addSubjectAttributeName("uid");
WsSubject[] subjects =
gs.execute().getWsSubjects();
if (subjects == null) {
return null;
}
List<User> users = new ArrayList<>();
for (WsSubject wsSubject : subjects) {
String mail = wsSubject.getAttributeValue(0);
if (emailAddress.equals(mail)) {
String uid =
wsSubject.getAttributeValue(1);
users.add(new User(uid, mail));
}
}
if (users.isEmpty()) {
return null;
}
return users;
}
public static void createUser(String scope, User user)
throws NamingException {
Attributes attributes = new BasicAttributes();
attributes.put("objectClass", "inetOrgPerson");
attributes.put("mail", user.getEmail());
attributes.put("uid", user.getUid());
attributes.put("cn", "N/A");
attributes.put("sn", "N/A");
attributes.put("userPassword", "foo");
getDirContext().createSubcontext("uid=" +
user.getUid() + "," + scope, attributes);
}
public static List<String>
getSubjectsIdsFromAttribute(String attributeName, String
attributeValue, boolean newlyCreatedUser) {
log.debug("Searching the id of a subject with the
attribute '" + attributeName + "' equals to '" +
attributeValue + "'");
GcGetSubjects gs = new GcGetSubjects();
gs.assignSearchString(attributeValue);
gs.addSubjectAttributeName(attributeName);
List<String> subjectsIds = new
ArrayList<>();
for (int attempt = 1; attempt <= 40; attempt++)
{
WsSubject[] subjects =
gs.execute().getWsSubjects();
if (subjects != null) {
for (WsSubject subject : subjects) {
String retrievedAttribute =
subject.getAttributeValue(0);
if
(attributeValue.equals(retrievedAttribute)) {
subjectsIds.add(subject.getId());
}
}
}
if (!newlyCreatedUser) {
if (subjectsIds.isEmpty()) {
return null;
}
return subjectsIds;
}
if (!subjectsIds.isEmpty()) {
return subjectsIds;
}
log.debug("subjectId is null, attempt #" +
attempt);
try {
Thread.sleep(1000);
} catch (InterruptedException ex) {
}
}
if (subjectsIds.isEmpty()) {
return null;
}
return subjectsIds;
}
}
// --------------------------------------------------------
public class MainTest {
@Test
public void test() throws Exception {
String email = "";
boolean newlyCreated = false;
List<User> users =
Util.getUsersByEmail(email);
if (users == null) {
User user = new User(email, email);
Util.createUser("ou=custom_users,dc=oats,dc=inaf,dc=it",
user);
newlyCreated = true;
users = new ArrayList<>();
users.add(user);
}
for (User user : users) {
assertNotNull(Util.getSubjectsIdsFromAttribute("mail",
user.getEmail(), newlyCreated));
// Use subject id to add user into groups
}
}
}
Thank you for your time.
Cheers,
Sonia
On 14/09/2016 16:03, Shilen Patel wrote:
Hi Sonia,
Are you running GcGetSubjects for a user, then adding the
ldap account,
and then running GcGetSubjects again?
If so, then I could see the first query doing some
caching. Although, I
haven't been able to reproduce it. Can you send exactly
how you're doing
that query?
Thanks!
- Shilen
On 9/14/16, 6:07 AM, "Sonia Zorba" <>
wrote:
Hi,
I have an application that adds a new account to a LDAP
(using
javax.naming classes).
This LDAP is a source for Grouper and, after the
insertion, the
application try to retrieve the new account using the
Grouper API
(GcGetSubjects).
For about the first 30 seconds the subject is not
found, after it is
retrieved correctly.
I imagine there could be a kind of cache or other
reasons for this delay
but I wasn't able to find any reference about this in
the documentation.
Can you suggest me what I should configure to speed up
this process?
Thanks,
Sonia
