Grouper Users - Open Discussion List

["Bee-Lindgren, Bert" <>]

Akki,

PSPNG does not currently support combining group creation with the addition of the group's initial member. I've created a Jira for adding this.

https://bugs.internet2.edu/jira/browse/GRP-1376

Are there any concerns about removing the last member?... does the group need to be deleted?

Sincerely,

  Bert

---

From: Akki Kumar <>
Sent: Wednesday, September 21, 2016 11:29 AM
To: mchyzerpenn; Bee-Lindgren, Bert
Cc:
Subject: Re: Grouper PSPNG

 

Hello,

Does PSPNG support member addition while creating a group in LDAP? Our LDAP system requires adding members during group creation and I couldn't find a way do it through PSPNG. 

changeLog.consumer.pspng_testOne.groupCreationLdifTemplate = dn: cn=${grouperUtil.extensionFromName(name)}||cn: ${grouperUtil.extensionFromName(name)}||objectclass: groupOfNames||member: <CONFIGURATION_TO_ADD_MEMBER>

Thank you,

Akki

On Tue, Sep 20, 2016 at 10:57 AM, Akki Kumar <> wrote:

Hello,

I am trying to integrate PSPNG with our LDAP system and its erroring out. I followed configuration “Group of Unique Names”: https://spaces.internet2.edu/display/Grouper/Grouper+Provisioning%3A+PSPNG

 

When I run loader with “Group of Unique Names” configuration, it shows below error:

Problem while creating new object: [dn=cn=testGroup,ou=test,ou=testgrouper,dc=umd,dc=edu[[cn[testGroup]], [objectclass[groupOfNames]]]]

[org.ldaptive.LdapException@979158603::resultCode=OBJECT_CLASS_VIOLATION, matchedDn=null, responseControls=null, referralURLs=[], messageId=-1, message=LDAPException(resultCode=65 (object class violation), errorMessage='object class violation'), providerException=LDAPException(resultCode=65 (object class violation), errorMessage='object class violation')]

        at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:55)

        at org.ldaptive.provider.unboundid.UnboundIDConnection.processLDAPException(UnboundIDConnection.java:543)

        at org.ldaptive.provider.unboundid.UnboundIDConnection.add(UnboundIDConnection.java:317)

        at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:253)

        at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:226)

        at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:54)

        at edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(Provisioner.java:678)

        at edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(Provisioner.java:453)

        at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:314)

        at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:175)

        at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:133)

        at java.lang.Thread.run(Thread.java:745)

Caused by: LDAPException(resultCode=65 (object class violation), errorMessage='object class violation')

        at com.unboundid.ldap.sdk.LDAPConnection.add(LDAPConnection.java:1969)

        at org.ldaptive.provider.unboundid.UnboundIDConnection.add(UnboundIDConnection.java:311)

        ... 9 more

 

Questions:

·      *  What configuration are needed to add members during group creation by Grouper?

changeLog.consumer.pspng_testOne.groupCreationLdifTemplate = dn: cn=${grouperUtil.extensionFromName(name)}||cn: ${grouperUtil.extensionFromName(name)}||objectclass: groupOfNames||member: <CONFIGURATION_TO_ADD_MEMBER>

·         *  Also when I set attribute supportsEmptyGroups = false, it still throws above error. Does PSPSNG supportsEmptyGroups attribute works when set to false?

Thank you,

Akki