Grouper Users - Open Discussion List

[Rob Gorrell <>]

Thanks Bert, looks like my searching was a little...well... outdated.  GRP-949 was exactly what I'm looking for and has solved my problems... we're back provisioning even the large groups!

I hear you about PSPNG and I've been wanting to do a Grouper upgrade for a while. Once we get through our shibb IDPv3 transition, some Grouper TLC is next on my hit list!

-Rob

On Wed, Jan 4, 2017 at 10:58 AM, Bee-Lindgren, Bert <> wrote:

First, a plug: PSPNG includes the necessary handler when isActiveDirectory = true. Hopefully, you can test and upgrade to PSPNG someday. 

In the meantime for PSP:

Since your getting a ClassNotFound exception, your property is getting evaluated. I think you need to use edu.internet2.middleware.psp.ldap.RangeSearchResultHandler (GRP-949)

---

From: <> on behalf of Rob Gorrell <>
Sent: Wednesday, January 4, 2017 10:36 AM
To:
Subject: [grouper-users] AD Range Attribute support with the PSP

 

We have several large Grouper groups that are failing to provision/update to a Microsoft AD LDAP server with the follow error:
  <errorMessage>[LDAP: error code 68 - 00000562: UpdErr: DSID-031A11D7, problem 6005 (ENTRY_EXISTS), data 0

I dug around and found GRP-335 from the v1.5.0 days and ldappc-ng. I've tried adding edu.vt.middleware.ldap.searchResultHandlers=edu.internet2.middleware.ldappc.util.RangeSearchResultHandler

to my ldap.properties file but that just lands me with a java.lang.ClassNotFoundException: edu.internet2.middleware.ldappc.util.RangeSearchResultHandler in v2.0.0 that we are currently running.

I saw another old thread that says I need to add the old ldappc-ng jar to lib/custom but I'm not sure where to get it from since we've moved on from the days of ldappc? I also thought GRP-335 was going to add that jar back to later releases of Grouper so that RangeSearchResultHandler was available to the PSP.

I'm hoping someone can tell me how to turn on RangeSearchResultHandler in v2.0+ and the PSP as I feel pretty certain this is my problem on provisioning these large groups to AD LDAP.

Thanks,

-Rob

--

Robert W. Gorrell
Systems Architect, Identity and Access Management

University of NC at Greensboro
336-334-5954
PGP Key ID B36DB0CA

--

Robert W. Gorrell
Systems Architect, Identity and Access Management

University of NC at Greensboro
336-334-5954
PGP Key ID B36DB0CA