grouper-users - [grouper-users] Trying to use the " addIncludeExclude " feature.

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Trying to use the " addIncludeExclude " feature.

From: "Black, Carey M." <>
To: "" <>
Subject: [grouper-users] Trying to use the " addIncludeExclude " feature.
Date: Wed, 31 May 2017 20:41:30 +0000
Accept-language: en-US
Authentication-results: spf=pass (sender IP is 128.146.163.15) smtp.mailfrom=osu.edu; internet2.edu; dkim=none (message not signed) header.d=none;internet2.edu; dmarc=pass action=none header.from=osu.edu;
Ironport-phdr: 9a23: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
Spamdiagnosticmetadata: NSPM
Spamdiagnosticoutput: 1:99

Trying to use the " addIncludeExclude " feature.

REF: https://spaces.internet2.edu/display/Grouper/Include+exclude+and+require+groups

I am expecting this feature to “quickly implement” the “access policy group” pattern.

( A ref to the Grouper Deployment document:

“

An access policy group is a composite group whose membership is composed of a single

include group (i.e. an allow group) and a single exclude group (i.e. deny group).

“

)

My expectation of this was ( I hope a correct expectation ):

Step1: create a group.

Step2: Add the attribute to the group and have grouper create include/exclude groups relative to this group.

Step3: Take over the world!!!! ( Well, move on to the next thing. J )

Well, end up with my group becoming a “composite group” of the “include” minus the “exclude” groups that were “auto created” in step 2.

If it matters my config is:

grouper.properties has

grouperIncludeExclude.use = true

grouperIncludeExclude.requireGroups.use = false

Grouper UI has “Wheel” enabled.

My account is a member of “Wheel”. (And a few other things too.)

( Maybe requireGroups.use = false is a problem for some reason?)

Unfortunately it is not working.

I created a group. ( via the New UI. )

Got to the “More Actions” button and switch to the "Admin UI”.

Click “edit Group”.

Check the addIncludeExclude groupType.

Click Save…

Get an error on the Admin UI.

Found this in the grouperUi/grouper_error.log

“

2017-05-31 15:17:54,642: [ajp-nio-8009-exec-3] ERROR GrouperCapableAction.execute(342) - < My_USER_NAME _STUFF > - edu.internet2.middleware.grouper.exception.AttributeDefNameAddException: Cannot saveOrUpdate attribute assign: Error doing include/exclude on group: eea8dbd8fcb84a4aae0986aa9ce35f61,

Hook GroupTypeTupleIncludeExcludeHook.groupTypeTuplePostInsert id: TDNH0YAN,

Exception in save: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, edu.internet2.middleware.grouper.hibernate.ByObject@3b5333d2,

Problem in HibernateSession: HibernateSession (324f7ca5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532),

Exception in saveOrUpdate: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: null, tx type: null,

Problem in HibernateSession: HibernateSession (f324a97): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532),

Problem in HibernateSession: HibernateSession (2c6a4df5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532)

at edu.internet2.middleware.grouper.attr.assign.AttributeAssign$1.callback(AttributeAssign.java:656)

at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

at edu.internet2.middleware.grouper.attr.assign.AttributeAssign.saveOrUpdate(AttributeAssign.java:573)

at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.internal_assignAttributeHelper(AttributeAssignBaseDelegate.java:521)

at edu.internet2.middleware.grouper.Group$5.callback(Group.java:1573)

at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

at edu.internet2.middleware.grouper.Group.internal_addType(Group.java:1541)

at edu.internet2.middleware.grouper.Group.addType(Group.java:1526)

at edu.internet2.middleware.grouper.Group.addType(Group.java:1496)

at edu.internet2.middleware.grouper.ui.actions.SaveGroupAction.doTypes(SaveGroupAction.java:372)

at edu.internet2.middleware.grouper.ui.actions.SaveGroupAction.grouperExecute(SaveGroupAction.java:263)

at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction$1.callback(GrouperCapableAction.java:252)

at edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO$1.callback(Hib3TransactionDAO.java:66)

at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

at edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO.transactionCallback(Hib3TransactionDAO.java:56)

at edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:87)

at edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:106)

at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.grouperTransactionExecute(GrouperCapableAction.java:246)

at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.execute(GrouperCapableAction.java:323)

at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:439)

at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:242)

at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)

at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:230)