Skip to Content.
Sympa Menu

grouper-users - [grouper-users] RE: Trying to use the " addIncludeExclude " feature.

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: Trying to use the " addIncludeExclude " feature.


Chronological Thread 
  • From: "Black, Carey M." <>
  • To: "" <>
  • Subject: [grouper-users] RE: Trying to use the " addIncludeExclude " feature.
  • Date: Wed, 7 Jun 2017 04:13:37 +0000
  • Accept-language: en-US
  • Authentication-results: spf=pass (sender IP is 128.146.163.15) smtp.mailfrom=osu.edu; internet2.edu; dkim=none (message not signed) header.d=none;internet2.edu; dmarc=pass action=none header.from=osu.edu;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Bump?

 

--

Carey Matthew

 

From: Black, Carey M.
Sent: Wednesday, May 31, 2017 4:42 PM
To:
Subject: Trying to use the " addIncludeExclude " feature.

 

Trying to use the " addIncludeExclude " feature.

REF: https://spaces.internet2.edu/display/Grouper/Include+exclude+and+require+groups

 

I am expecting this feature to “quickly implement” the “access policy group” pattern.

                ( A ref to the Grouper Deployment document:

An access policy group is a composite group whose membership is composed of a single

include group (i.e. an allow group) and a single exclude group (i.e. deny group).

)

 

My expectation of this was ( I hope a correct expectation ):

 

Step1: create a group.

Step2: Add the attribute to the group and have grouper create include/exclude groups relative to this group.

Step3: Take over the world!!!! ( Well, move on to the next thing. J )

                Well, end up with my group becoming a “composite group” of the “include” minus the “exclude” groups that were “auto created” in step 2.

 

 

 

If it matters my config is:

 

grouper.properties has

                grouperIncludeExclude.use = true

                grouperIncludeExclude.requireGroups.use = false

 

Grouper UI has “Wheel” enabled.

My account is a member of “Wheel”. (And a few other things too.)

 

( Maybe requireGroups.use = false is a problem for some reason?)

Unfortunately it is not working.

 

 

I created a group. ( via the New UI. )

 

 

Got to the “More Actions” button and switch to the "Admin UI”.

Click “edit Group”.

Check the addIncludeExclude groupType.

Click Save…

Get an error on the Admin UI.

 

Found this in the grouperUi/grouper_error.log

 

2017-05-31 15:17:54,642: [ajp-nio-8009-exec-3] ERROR GrouperCapableAction.execute(342) - < My_USER_NAME _STUFF > - edu.internet2.middleware.grouper.exception.AttributeDefNameAddException: Cannot saveOrUpdate attribute assign: Error doing include/exclude on group: eea8dbd8fcb84a4aae0986aa9ce35f61,

Hook GroupTypeTupleIncludeExcludeHook.groupTypeTuplePostInsert id: TDNH0YAN,

Exception in save: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, ,

Problem in HibernateSession: HibernateSession (324f7ca5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532),

Exception in saveOrUpdate: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: null, tx type: null,

Problem in HibernateSession: HibernateSession (f324a97): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532),

Problem in HibernateSession: HibernateSession (2c6a4df5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssign$1.callback(AttributeAssign.java:656)

        at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssign.saveOrUpdate(AttributeAssign.java:573)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.internal_assignAttributeHelper(AttributeAssignBaseDelegate.java:521)

        at edu.internet2.middleware.grouper.Group$5.callback(Group.java:1573)

        at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

        at edu.internet2.middleware.grouper.Group.internal_addType(Group.java:1541)

        at edu.internet2.middleware.grouper.Group.addType(Group.java:1526)

        at edu.internet2.middleware.grouper.Group.addType(Group.java:1496)

        at edu.internet2.middleware.grouper.ui.actions.SaveGroupAction.doTypes(SaveGroupAction.java:372)

        at edu.internet2.middleware.grouper.ui.actions.SaveGroupAction.grouperExecute(SaveGroupAction.java:263)

        at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction$1.callback(GrouperCapableAction.java:252)

        at edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO$1.callback(Hib3TransactionDAO.java:66)

        at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

        at edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO.transactionCallback(Hib3TransactionDAO.java:56)

        at edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:87)

        at edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:106)

        at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.grouperTransactionExecute(GrouperCapableAction.java:246)

        at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.execute(GrouperCapableAction.java:323)

        at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:439)

        at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:242)

        at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)

        at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:230)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at org.owasp.csrfguard.CsrfGuardFilter.doFilter(CsrfGuardFilter.java:110)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at edu.internet2.middleware.grouper.ui.LoginCheckFilter$1.callback(LoginCheckFilter.java:188)

        at edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:974)

        at edu.internet2.middleware.grouper.ui.LoginCheckFilter.doFilter(LoginCheckFilter.java:183)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at edu.internet2.middleware.grouper.ui.ErrorFilter.doFilter(ErrorFilter.java:147)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:1049)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)

        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:478)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:80)

        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:624)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:341)

        at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:478)

        at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)

        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:798)

        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1441)

        at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)

        at java.lang.Thread.run(Thread.java:748)

Caused by: java.lang.RuntimeException: Error doing include/exclude on group: eea8dbd8fcb84a4aae0986aa9ce35f61,

Hook GroupTypeTupleIncludeExcludeHook.groupTypeTuplePostInsert id: TDNH0YAN,

Exception in save: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, ,

Problem in HibernateSession: HibernateSession (324f7ca5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532),

Exception in saveOrUpdate: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: null, tx type: null

        at edu.internet2.middleware.grouper.hooks.examples.GroupTypeTupleIncludeExcludeHook.groupTypeTupleHelper(GroupTypeTupleIncludeExcludeHook.java:236)

        at edu.internet2.middleware.grouper.hooks.examples.GroupTypeTupleIncludeExcludeHook.groupTypeTuplePostInsert(GroupTypeTupleIncludeExcludeHook.java:161)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at edu.internet2.middleware.grouper.util.GrouperUtil.invokeMethod(GrouperUtil.java:4143)

        at edu.internet2.middleware.grouper.hooks.logic.GrouperHooksUtils.executeHook(GrouperHooksUtils.java:493)

        at edu.internet2.middleware.grouper.hooks.logic.GrouperHooksUtils.callHooksIfRegistered(GrouperHooksUtils.java:293)

        at edu.internet2.middleware.grouper.hooks.logic.GrouperHooksUtils.callHooksIfRegistered(GrouperHooksUtils.java:232)

        at edu.internet2.middleware.grouper.hooks.logic.GrouperHooksUtils.callHooksIfRegistered(GrouperHooksUtils.java:158)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssign.onPostSave(AttributeAssign.java:1949)

        at edu.internet2.middleware.grouper.hibernate.ByObject.saveOrUpdate(ByObject.java:396)

        at edu.internet2.middleware.grouper.hibernate.ByObjectStatic$5.callback(ByObjectStatic.java:376)

        at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

        at edu.internet2.middleware.grouper.hibernate.ByObjectStatic.saveOrUpdate(ByObjectStatic.java:363)

        at edu.internet2.middleware.grouper.internal.dao.hib3.Hib3AttributeAssignDAO.saveOrUpdate(Hib3AttributeAssignDAO.java:197)

        at edu.internet2.middleware.grouper.attr.assign.AttributeAssign$1.callback(AttributeAssign.java:589)

        ... 60 more

Caused by: java.lang.RuntimeException: edu.internet2.middleware.grouper.exception.SchemaException: invalid group type: requireInGroups

        at edu.internet2.middleware.grouper.hooks.examples.GroupTypeTupleIncludeExcludeHook.manageIncludesExcludesAndGroups(GroupTypeTupleIncludeExcludeHook.java:476)

        at edu.internet2.middleware.grouper.hooks.examples.GroupTypeTupleIncludeExcludeHook.groupTypeTupleHelper(GroupTypeTupleIncludeExcludeHook.java:233)

        ... 77 more

Caused by: edu.internet2.middleware.grouper.exception.SchemaException: invalid group type: requireInGroups

        at edu.internet2.middleware.grouper.GroupTypeFinder.find(GroupTypeFinder.java:109)

        at edu.internet2.middleware.grouper.hooks.examples.GroupTypeTupleIncludeExcludeHook.manageIncludesExcludesAndGroups(GroupTypeTupleIncludeExcludeHook.java:411)

        ... 78 more

 

 

 

Any idea what I am not understanding about this feature?

 

--

Carey Matthew

 




Archive powered by MHonArc 2.6.19.

Top of Page