Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

Yeah, at some point we should probably move that logic to the same place that 
creates other attributes for Grouper.

There is a script at the bottom here that is what Penn used to create the 
attributes:

https://spaces.internet2.edu/display/Grouper/PSPNG+at+Penn

Note, edit the names if you have a different location for "etc".  (e.g. 
psu:etc?)

Thanks
Chris


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Michael R Gettes
Sent: Tuesday, February 14, 2017 11:05 AM
To: grouper-users 
<>
Subject: [grouper-users] PSPNG (latest)

We have applied patches (all patches) and, from a private conversation with 
Bert, I was led to believe when we first start up PSPNG it will create the 
attributes for PSPNG in etc:attribute:userData:provision_to and 
…:do_not_provision_to

I start up the loader with PSPNG enabled and I do not see these attributes 
created.  I waited a couple of minutes.  I see the PSPNG jobs run in the 
GROUPER_LOADER_LOG.  No errors for the jobs and no errors in the log files on 
startup.

Either I misunderstand something or haven’t done something right.

Guidance appreciated.

PSPNG patches from patch file in api:
grouper_v2_3_0_pspng_patch_0.date = 2017/02/10 15:52:42
grouper_v2_3_0_pspng_patch_0.state = applied
grouper_v2_3_0_pspng_patch_1.date = 2017/02/10 15:52:45
grouper_v2_3_0_pspng_patch_1.state = applied
grouper_v2_3_0_pspng_patch_2.date = 2017/02/10 15:52:47
grouper_v2_3_0_pspng_patch_2.state = applied
grouper_v2_3_0_pspng_patch_3.date = 2017/02/10 15:52:49
grouper_v2_3_0_pspng_patch_3.state = applied
grouper_v2_3_0_pspng_patch_4.date = 2017/02/10 15:52:50
grouper_v2_3_0_pspng_patch_4.state = applied
grouper_v2_3_0_pspng_patch_5.date = 2017/02/10 15:52:52
grouper_v2_3_0_pspng_patch_5.state = applied
grouper_v2_3_0_pspng_patch_6.date = 2017/02/10 15:52:53
grouper_v2_3_0_pspng_patch_6.state = applied
grouper_v2_3_0_pspng_patch_7.date = 2017/02/10 15:52:55
grouper_v2_3_0_pspng_patch_7.state = applied
grouper_v2_3_0_pspng_patch_8.date = 2017/02/10 15:52:56
grouper_v2_3_0_pspng_patch_8.state = applied

ldap.openldap.ldapUrl = X
ldap.openldap.bindDn = Y
ldap.openldap.bindCredential = Z
ldap.openldap.ldapUserCacheSize = 150000
ldap.openldap.grouperSubjectCacheSize = 150000
ldap.openldap.ldapSearchResultPagingSize = 1000
ldap.openldap.connectTimeout = 30000
ldap.openldap.useStartTLS = true


#changeLog.consumer.pspng_groupOfNames.ldapPoolName = groupOfNames

changeLog.consumer.pspng_groupOfNames.class = 
edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim
changeLog.consumer.pspng_groupOfNames.type = 
edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner
changeLog.consumer.pspng_groupOfNames.quartzCron = 0/10 * * * * ?
changeLog.consumer.pspng_groupOfNames.ldapPoolName = openldap
changeLog.consumer.pspng_groupOfNames.memberAttributeName = member
changeLog.consumer.pspng_groupOfNames.memberAttributeValueFormat = 
${ldapUser.getDn()}
changeLog.consumer.pspng_groupOfNames.grouperIsAuthoritative = TRUE
changeLog.consumer.pspng_groupOfNames.maxValuesToChangePerOperation = 5000
changeLog.consumer.pspng_groupOfNames.groupSearchBaseDn = 
ou=ng,ou=group,dc=psu,dc=edu
changeLog.consumer.pspng_groupOfNames.allGroupsSearchFilter = 
objectclass=groupOfNames
changeLog.consumer.pspng_groupOfNames.singleGroupSearchFilter = 
(&(objectclass=groupOfNames)(cn=${group.name}))
changeLog.consumer.pspng_groupOfNames.groupSearchAttributes = 
cn,gidNumber,objectclass
changeLog.consumer.pspng_groupOfNames.groupCreationLdifTemplate = dn: 
cn=${group.name}||cn: ${group.name}||objectclass: groupOfNames||objectclass: 
posixGroup||gidNumber: ${group.idIndex}
changeLog.consumer.pspng_groupOfNames.userSearchBaseDn = dc=psu,dc=edu
changeLog.consumer.pspng_groupOfNames.userSearchFilter = 
(&(objectclass=eduPerson)(eduPersonPrincipalName=${subject.id}))