Skip to Content.
Sympa Menu

grouper-users - [grouper-users] Re: Grouper PSPNG

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Re: Grouper PSPNG

Chronological Thread 
  • From: Akki Kumar <>
  • To: "Bee-Lindgren, Bert" <>
  • Cc: mchyzerpenn <>, "" <>
  • Subject: [grouper-users] Re: Grouper PSPNG
  • Date: Fri, 30 Sep 2016 12:58:30 -0400
  • Ironport-phdr: 9a23:tZHfLBMOrV2mA/0YFckl6mtUPXoX/o7sNwtQ0KIMzox0KP79rarrMEGX3/hxlliBBdydsK0UzbeN+Pm9EUU7or+/81k6OKRWUBEEjchE1ycBO+WiTXPBEfjxciYhF95DXlI2t1uyMExSBdqsLwaK+i76xXcoFx7+LQt4IPjuUs6X1pzvlrP6x5qGKS9FiX+ZYLV+Iw+7q0GZnMQMncEqfqw80AePqHZFPuBXw29nP1+VtxH9+oG/9YJu+CQWtv48oZ1uS6L/Ko07Tr0QLykjOnp9sMTuvAvCSwSW+3YHTmQRlAEQW1ft4xTzX5O3uSz/4LkukBKGNNH7GOhnEQ+p6L1mHVqx0H8K

Hi Bert,

Thank you for creating Jira ticket. 

Yes, grouper should delete group when the last member or all members of the group are deleted.

Thank you,

On Mon, Sep 26, 2016 at 6:51 AM, Bee-Lindgren, Bert <> wrote:


PSPNG does not currently support combining group creation with the addition of the group's initial member. I've created a Jira for adding this.

Are there any concerns about removing the last member?... does the group need to be deleted?



From: Akki Kumar <>
Sent: Wednesday, September 21, 2016 11:29 AM
To: mchyzerpenn; Bee-Lindgren, Bert
Subject: Re: Grouper PSPNG

Does PSPNG support member addition while creating a group in LDAP? Our LDAP system requires adding members during group creation and I couldn't find a way do it through PSPNG

changeLog.consumer.pspng_testOne.groupCreationLdifTemplate = dn: cn=${grouperUtil.extensionFromName(name)}||cn: ${grouperUtil.extensionFromName(name)}||objectclass: groupOfNames||member: <CONFIGURATION_TO_ADD_MEMBER>

Thank you,

On Tue, Sep 20, 2016 at 10:57 AM, Akki Kumar <> wrote:


I am trying to integrate PSPNG with our LDAP system and its erroring out. I followed configuration “Group of Unique Names”:


When I run loader with “Group of Unique Names” configuration, it shows below error:

Problem while creating new object: [dn=cn=testGroup,ou=test,ou=testgrouper,dc=umd,dc=edu[[cn[testGroup]], [objectclass[groupOfNames]]]]

[org.ldaptive.LdapException@979158603::resultCode=OBJECT_CLASS_VIOLATION, matchedDn=null, responseControls=null, referralURLs=[], messageId=-1, message=LDAPException(resultCode=65 (object class violation), errorMessage='object class violation'), providerException=LDAPException(resultCode=65 (object class violation), errorMessage='object class violation')]

        at org.ldaptive.provider.ProviderUtils.throwOperationException(

        at org.ldaptive.provider.unboundid.UnboundIDConnection.processLDAPException(

        at org.ldaptive.provider.unboundid.UnboundIDConnection.add(

        at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(

        at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(

        at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(

        at edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(

        at edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(

        at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(

        at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(

        at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$


Caused by: LDAPException(resultCode=65 (object class violation), errorMessage='object class violation')

        at com.unboundid.ldap.sdk.LDAPConnection.add(

        at org.ldaptive.provider.unboundid.UnboundIDConnection.add(

        ... 9 more



·      *  What configuration are needed to add members during group creation by Grouper?

changeLog.consumer.pspng_testOne.groupCreationLdifTemplate = dn: cn=${grouperUtil.extensionFromName(name)}||cn: ${grouperUtil.extensionFromName(name)}||objectclass: groupOfNames||member: <CONFIGURATION_TO_ADD_MEMBER>

·         *  Also when I set attribute supportsEmptyGroups = false, it still throws above error. Does PSPSNG supportsEmptyGroups attribute works when set to false?

Thank you,


Archive powered by MHonArc 2.6.19.

Top of Page