Grouper Users - Open Discussion List

["Peter St. Onge" <>]

And while I'm at it, I'm wondering if anyone has implemented PSPNG for a
bushy group layout (especially against OpenLDAP), as I'd be most
interested in your experiences with it.

Thanks in advance, -- pete


On 2017-02-01 12:55 PM, Peter St. Onge wrote:
> Making some progress on work with PSPNG, but am still trying to get a
> simple group provisioned (one member). I believe I have the provisioning
> attribute set, but I still seem to be getting a null pointer exception.
> 
> Any pointers appreciated. Thanks! -- p
> 
> 2017-02-01 12:25:38,525: [pspng_idp-test-FullSync] DEBUG
> GrouperUtil.substituteExpressionLanguage(9332) -  - Subsituting EL:
> '${utils.containedWithin(provisionerName,
> stemAttributes['etc:pspng:provision_to'],
> groupAttributes['etc:pspng:provision_to']) &&
> !utils.containedWithin(provisionerName,
> stemAttributes['etc:pspng:do_not_provision_to'],
> groupAttributes['etc:pspng:do_not_provision_to'])}', and with env vars:
> idIndex, userSearchBaseDn, groupAttributes, groupCreationBaseDn,
> stemAttributes, utils, groupSearchBaseDn, name, provisionerName, group,
> provisionerType, grouperUtil with result: 'true'
> 2017-02-01 12:25:38,525: [pspng_idp-test-FullSync] DEBUG
> Provisioner.evaluateJexlExpression(518) -  - Evaluated Jexl expression:
> true FROM ${utils.containedWithin(provisionerName,
> stemAttributes['etc:pspng:provision_to'],
> groupAttributes['etc:pspng:provision_to']) &&
> !utils.containedWithin(provisionerName,
> stemAttributes['etc:pspng:do_not_provision_to'],
> groupAttributes['etc:pspng:do_not_provision_to'])} WITH variables
> {idIndex=10063, userSearchBaseDn=dc=maple,dc=utoronto,dc=ca,
> groupAttributes={etc:pspng:provision_to=[pspng_idp-test]},
> groupCreationBaseDn=ou=groupertest,dc=maple,dc=utoronto,dc=ca,
> stemAttributes={},
> utils=edu.internet2.middleware.grouper.pspng.PspJexlUtils@33072a3a,
> groupSearchBaseDn=ou=groupertest,dc=maple,dc=utoronto,dc=ca,
> name=utormaple:base, provisionerName=pspng_idp-test,
> group=Group[name=utormaple:base,uuid=0453247ab2394450a8fff52f96d0d334],
> provisionerType=LdapGroupProvisioner}
> 2017-02-01 12:25:38,525: [pspng_idp-test-FullSync] DEBUG
> Provisioner.shouldGroupBeProvisioned(1230) -  - pspng_idp-test: Group
> utormaple:base matches group-selection filter.
> 2017-02-01 12:25:38,525: [pspng_idp-test-FullSync] WARN
> Provisioner.prepareGroupCache(719) -  - pspng_idp-test: Group was not
> found in target system: utormaple:base
> 2017-02-01 12:25:38,525: [pspng_idp-test-FullSync] DEBUG
> Provisioner.prepareUserCache(576) -  - Starting to cache user
> information for 0 items
> 2017-02-01 12:25:38,525: [pspng_idp-test-FullSync] DEBUG
> GrouperClientLog.debug(82) -  - Subsituting EL:
> '$$grouper.attribute.rootStem$$:userData:grouperUserDataValueDef', and
> with env vars: elUtils with result:
> '$$grouper.attribute.rootStem$$:userData:grouperUserDataValueDef'
> 2017-02-01 12:25:38,526: [pspng_idp-test-FullSync] DEBUG
> GrouperClientLog.debug(82) -  - Cant find text for variable: 'newline'
> 2017-02-01 12:25:38,526: [pspng_idp-test-FullSync] DEBUG
> GrouperClientLog.debug(82) -  - Cant find text for variable: 'newline'
> 2017-02-01 12:25:38,526: [pspng_idp-test-FullSync] DEBUG
> GrouperClientLog.debug(82) -  - configObjectPropertyCount: 243
> 2017-02-01 12:25:38,526: [pspng_idp-test-FullSync] DEBUG
> HibernateSession.<init>(289) -  - HibernateSession.<init>() line 289,
> HibernateSession._internal_hibernateSession() line 467,
> HibernateSession.callbackHibernateSession() line 659, ByHqlStatic.list()
> line 391, ByHqlStatic.listSet() line 442,
> Hib3MembershipDAO.findAllMembersByGroupOwnerAndField() line 480,
> MembershipFinder.findMembers() line 1557, Group.getMembers() line 3430,
> Group.getMembers() line 3414, Group.getMembers() line 3399,
> Group.getMembers() line 3378, GrouperGroupInfo.getMembers() line 89,
> Provisioner.doFullSync() line 1007, FullSyncProvisioner.processGroup()
> line 315, FullSyncProvisioner.thread_manageFullSyncProcessing() line
> 174, FullSyncProvisioner.run() line 132
> 2017-02-01 12:25:38,526: [pspng_idp-test-FullSync] DEBUG
> HibernateSession.<init>(290) -  - grouperTransactionType:
> READONLY_OR_USE_EXISTING, okToUseHibernate: true, readonlyMode: false,
> parentSessionExists: false, newHibernateSession: true,
> immediateGrouperTransactionTypeUsed: READONLY_NEW,
> immediateGrouperTransactionTypeReadonly: true, hibernateSession:
> HibernateSession (1b656002): new, readonly, READONLY_NEW,
> notActiveTransaction, session (1c82315b)
> 2017-02-01 12:25:38,529: [pspng_idp-test-FullSync] DEBUG ByHql.list(433)
> -  - returnType: Member, hibernateSession: HibernateSession (1b656002):
> new, readonly, READONLY_NEW, notActiveTransaction, session (1c82315b),
> foundSize: 1
> 2017-02-01 12:25:38,529: [pspng_idp-test-FullSync] DEBUG
> HibernateSession.callbackHibernateSession(715) -  -
> HibernateSession.callbackHibernateSession() line 715, ByHqlStatic.list()
> line 391, ByHqlStatic.listSet() line 442,
> Hib3MembershipDAO.findAllMembersByGroupOwnerAndField() line 480,
> MembershipFinder.findMembers() line 1557, Group.getMembers() line 3430,
> Group.getMembers() line 3414, Group.getMembers() line 3399,
> Group.getMembers() line 3378, GrouperGroupInfo.getMembers() line 89,
> Provisioner.doFullSync() line 1007, FullSyncProvisioner.processGroup()
> line 315, FullSyncProvisioner.thread_manageFullSyncProcessing() line
> 174, FullSyncProvisioner.run() line 132
> 2017-02-01 12:25:38,529: [pspng_idp-test-FullSync] DEBUG
> HibernateSession.callbackHibernateSession(716) -  -
> grouperTransactionType: READONLY_OR_USE_EXISTING, auditControl:
> WILL_NOT_AUDIT, hibernateSession: HibernateSession (1b656002): new,
> readonly, READONLY_NEW, notActiveTransaction, session (1c82315b),
> hibernateSessionsInThreadLocal: 1b656002, willCreateAudit: false,
> createdContext: false, closedSession: true
> 2017-02-01 12:25:38,530: [pspng_idp-test-FullSync] DEBUG
> Provisioner.prepareUserCache(576) -  - Starting to cache user
> information for 1 items
> 2017-02-01 12:25:38,530: [pspng_idp-test-FullSync] DEBUG
> Provisioner.cacheUser(749) -  - Adding user to cache:
> 'stongepe'/'person'/'ldap'
> 2017-02-01 12:25:38,530: [pspng_idp-test-FullSync] INFO
> LdapGroupProvisioner.createGroup(251) -  - Creating LDAP group for
> GrouperGroup: utormaple:base
> 2017-02-01 12:25:38,530: [pspng_idp-test-FullSync] ERROR
> FullSyncProvisioner.processGroup(327) -  - pspng_idp-test: Problem doing
> full sync. Requeuing utormaple:base
> java.lang.NullPointerException
>         at
> edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:253)
>         at
> edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:168)
>         at
> edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:54)
>         at
> edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1043)
>         at
> edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:315)
>         at
> edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:174)
>         at
> edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:132)
>         at java.lang.Thread.run(Thread.java:745)
> 
> 
> 
> grouper.apiBinary-2.3.0/grouperPatchStatus.properties
> [...]
> grouper_v2_3_0_api_patch_44.date = 2017/01/18 08:30:08
> grouper_v2_3_0_api_patch_44.state = applied
> [...]
> grouper_v2_3_0_pspng_patch_7.date = 2017/01/18 08:50:30
> grouper_v2_3_0_pspng_patch_7.state = applied
> 


-- 
Peter St. Onge                           

Information Security Architect                     (416)978-5030
Business Continuity and Communications
Information + Technology Services          University of Toronto