Skip to Content.
Sympa Menu

grouper-users - [grouper-users] Re: Post pspng patch 4 log error and group loop

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Re: Post pspng patch 4 log error and group loop


Chronological Thread 
  • From: Jeffrey Crawford <>
  • To: Gouper Users List <>
  • Subject: [grouper-users] Re: Post pspng patch 4 log error and group loop
  • Date: Tue, 15 Nov 2016 09:49:37 -0800
  • Ironport-phdr: 9a23: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

Any word on this one?

Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!
---------------------------------------

On Thu, Nov 10, 2016 at 9:52 AM, Jeffrey Crawford <> wrote:
So a little more information, it looks like it does indeed now go through and process all of the groups. but then gets stuck in an endless loop on the "last" one. The problem is that I think some of the normal changelog stuff can get stalled when this happens. Updating group memberships seem to work, but things like renames require a new full sync.

It's definitely better, but I would expect it just work through the groups missing source subjects and end after the last group in the definition is processed.

It's getting better :)

Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!
---------------------------------------

On Tue, Nov 8, 2016 at 3:19 PM, Jeffrey Crawford <> wrote:
Good afternoon,

Still getting this kind of error in the logs after the pspng patch 4. I can confirm that the subjectID is not in the AD server, this is also the first account that it couldn't find when looking up the users do I need to add a configuration element to make it a warning?:

2016-11-08 14:44:00,657: [pspng_activedirectory-FullSync] WARN  Provisioner.prepareUserCache(633) -  - pspng_activedirectory: User n
ot found in target system: G052883842

.
.
.

2016-11-08 14:44:09,415: [pspng_activedirectory-FullSync] ERROR Provisioner.evaluateJexlExpression(515) -  - Jexl _expression_ ${ldapUser.getDn()} could not be evaluated for subject ''G052883842'/'person'/'ucscidm'/null' and group 'ucsc:svc:its:wincore:eligibletologin/LdapGroup[ldap=LdapObject[cn=[eligibletologin],dn=cn=eligibletologin,ou=au groups,ou=groups,dc=autest,dc=ucsc,dc=edu]]' which used variableMap '{subject='G052883842'/'person'/'ucscidm', provisionerName=pspng_activedirectory, 

Thanks
Jeffrey E. Crawford
Enterprise Service Team

Both pilots and IT professionals require training and currency before charging into clouds!
---------------------------------------





Archive powered by MHonArc 2.6.19.

Top of Page