Grouper Users - Open Discussion List

[Jeffrey Crawford <>]

So a little more information, it looks like it does indeed now go through and process all of the groups. but then gets stuck in an endless loop on the "last" one. The problem is that I think some of the normal changelog stuff can get stalled when this happens. Updating group memberships seem to work, but things like renames require a new full sync.

It's definitely better, but I would expect it just work through the groups missing source subjects and end after the last group in the definition is processed.

It's getting better :)

Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!

---------------------------------------

On Tue, Nov 8, 2016 at 3:19 PM, Jeffrey Crawford <> wrote:

Good afternoon,

Still getting this kind of error in the logs after the pspng patch 4. I can confirm that the subjectID is not in the AD server, this is also the first account that it couldn't find when looking up the users do I need to add a configuration element to make it a warning?:

2016-11-08 14:44:00,657: [pspng_activedirectory-FullSync] WARN  Provisioner.prepareUserCache(633) -  - pspng_activedirectory: User n

ot found in target system: G052883842

.

.

.

2016-11-08 14:44:09,415: [pspng_activedirectory-FullSync] ERROR Provisioner.evaluateJexlExpression(515) -  - Jexl _expression_ ${ldapUser.getDn()} could not be evaluated for subject ''G052883842'/'person'/'ucscidm'/null' and group 'ucsc:svc:its:wincore:eligibletologin/LdapGroup[ldap=LdapObject[cn=[eligibletologin],dn=cn=eligibletologin,ou=au groups,ou=groups,dc=autest,dc=ucsc,dc=edu]]' which used variableMap '{subject='G052883842'/'person'/'ucscidm', provisionerName=pspng_activedirectory, 

Thanks

Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!

---------------------------------------