Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] AD Range Attribute support with the PSP

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] AD Range Attribute support with the PSP


Chronological Thread 
  • From: "Bee-Lindgren, Bert" <>
  • To: Rob Gorrell <>, "" <>
  • Subject: Re: [grouper-users] AD Range Attribute support with the PSP
  • Date: Wed, 4 Jan 2017 15:58:47 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

First, a plug: PSPNG includes the necessary handler when isActiveDirectory = true. Hopefully, you can test and upgrade to PSPNG someday. 


In the meantime for PSP:

Since your getting a ClassNotFound exception, your property is getting evaluated. I think you need to use edu.internet2.middleware.psp.ldap.RangeSearchResultHandler (GRP-949)



From: <> on behalf of Rob Gorrell <>
Sent: Wednesday, January 4, 2017 10:36 AM
To:
Subject: [grouper-users] AD Range Attribute support with the PSP
 
We have several large Grouper groups that are failing to provision/update to a Microsoft AD LDAP server with the follow error:
  <errorMessage>[LDAP: error code 68 - 00000562: UpdErr: DSID-031A11D7, problem 6005 (ENTRY_EXISTS), data 0

I dug around and found GRP-335 from the v1.5.0 days and ldappc-ng. I've tried adding edu.vt.middleware.ldap.searchResultHandlers=edu.internet2.middleware.ldappc.util.RangeSearchResultHandler
to my ldap.properties file but that just lands me with a java.lang.ClassNotFoundException: edu.internet2.middleware.ldappc.util.RangeSearchResultHandler in v2.0.0 that we are currently running.

I saw another old thread that says I need to add the old ldappc-ng jar to lib/custom but I'm not sure where to get it from since we've moved on from the days of ldappc? I also thought GRP-335 was going to add that jar back to later releases of Grouper so that RangeSearchResultHandler was available to the PSP.

I'm hoping someone can tell me how to turn on RangeSearchResultHandler in v2.0+ and the PSP as I feel pretty certain this is my problem on provisioning these large groups to AD LDAP.

Thanks,
-Rob

--
Robert W. Gorrell
Systems Architect, Identity and Access Management
University of NC at Greensboro
336-334-5954
PGP Key ID B36DB0CA

Archive powered by MHonArc 2.6.19.

Top of Page