grouper-users - [grouper-users] RE: Trying to use the " addIncludeExclude " feature.

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: Trying to use the " addIncludeExclude " feature.

From: "Black, Carey M." <>
To: "" <>
Subject: [grouper-users] RE: Trying to use the " addIncludeExclude " feature.
Date: Thu, 8 Jun 2017 17:34:13 +0000
Accept-language: en-US
Authentication-results: spf=pass (sender IP is 128.146.163.18) smtp.mailfrom=osu.edu; internet2.edu; dkim=none (message not signed) header.d=none;internet2.edu; dmarc=pass action=none header.from=osu.edu;
Ironport-phdr: 9a23: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
Spamdiagnosticmetadata: NSPM
Spamdiagnosticoutput: 1:99

FWIW:

Apparently, on a new install of grouper, when you set:

“

grouper.properties has

grouperIncludeExclude.use = true

grouperIncludeExclude.requireGroups.use = false

“

You will see the error that I included.

“

Caused by: edu.internet2.middleware.grouper.exception.SchemaException: invalid group type: requireInGroups

“

When you have NEVER enabled “grouperIncludeExclude.requireGroups.use” on your system before.

However, if you enable “…requireGroups.use”, then grouper “auto adds” that attribute definition of “legacyAttributeDef_requireInGroups”. (Created on my system today.)

FWIW: Attribute definition “legacyGroupTypeDef_addIncludeExclude” was crated on “May 20” on my system.

Which apparently is REQUIRED for “grouperIncludeExclude.use” to work properly.

So if you want to use “grouperIncludeExclude.use”. Set both to be true then Restart the UI.

( created https://bugs.internet2.edu/jira/browse/GRP-1560 )

Carey Matthew

From: [mailto:] On Behalf Of Black, Carey M.
Sent: Wednesday, June 7, 2017 12:14 AM
To:
Subject: [grouper-users] RE: Trying to use the " addIncludeExclude " feature.

Bump?

Carey Matthew

From: Black, Carey M.
Sent: Wednesday, May 31, 2017 4:42 PM
To:
Subject: Trying to use the " addIncludeExclude " feature.

Trying to use the " addIncludeExclude " feature.

REF: https://spaces.internet2.edu/display/Grouper/Include+exclude+and+require+groups

I am expecting this feature to “quickly implement” the “access policy group” pattern.

( A ref to the Grouper Deployment document:

“

An access policy group is a composite group whose membership is composed of a single

include group (i.e. an allow group) and a single exclude group (i.e. deny group).

“

)

My expectation of this was ( I hope a correct expectation ):

Step1: create a group.

Step2: Add the attribute to the group and have grouper create include/exclude groups relative to this group.

Step3: Take over the world!!!! ( Well, move on to the next thing. J )

Well, end up with my group becoming a “composite group” of the “include” minus the “exclude” groups that were “auto created” in step 2.

If it matters my config is:

grouper.properties has

grouperIncludeExclude.use = true

grouperIncludeExclude.requireGroups.use = false

Grouper UI has “Wheel” enabled.

My account is a member of “Wheel”. (And a few other things too.)

( Maybe requireGroups.use = false is a problem for some reason?)

Unfortunately it is not working.

I created a group. ( via the New UI. )

Got to the “More Actions” button and switch to the "Admin UI”.

Click “edit Group”.

Check the addIncludeExclude groupType.

Click Save…

Get an error on the Admin UI.

Found this in the grouperUi/grouper_error.log

“

2017-05-31 15:17:54,642: [ajp-nio-8009-exec-3] ERROR GrouperCapableAction.execute(342) - < My_USER_NAME _STUFF > - edu.internet2.middleware.grouper.exception.AttributeDefNameAddException: Cannot saveOrUpdate attribute assign: Error doing include/exclude on group: eea8dbd8fcb84a4aae0986aa9ce35f61,

Hook GroupTypeTupleIncludeExcludeHook.groupTypeTuplePostInsert id: TDNH0YAN,

Exception in save: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, ,

Problem in HibernateSession: HibernateSession (324f7ca5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532),

Exception in saveOrUpdate: edu.internet2.middleware.grouper.attr.assign.AttributeAssign, ByObjectStatic, query: ', cacheable: null, cacheRegion: null, entityName: null, tx type: null,

Problem in HibernateSession: HibernateSession (f324a97): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532),

Problem in HibernateSession: HibernateSession (2c6a4df5): notNew, notReadonly, READ_WRITE_NEW, activeTransaction, session (5c434532)

at edu.internet2.middleware.grouper.attr.assign.AttributeAssign$1.callback(AttributeAssign.java:656)

at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

at edu.internet2.middleware.grouper.attr.assign.AttributeAssign.saveOrUpdate(AttributeAssign.java:573)

at edu.internet2.middleware.grouper.attr.assign.AttributeAssignBaseDelegate.internal_assignAttributeHelper(AttributeAssignBaseDelegate.java:521)

at edu.internet2.middleware.grouper.Group$5.callback(Group.java:1573)

at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

at edu.internet2.middleware.grouper.Group.internal_addType(Group.java:1541)

at edu.internet2.middleware.grouper.Group.addType(Group.java:1526)

at edu.internet2.middleware.grouper.Group.addType(Group.java:1496)

at edu.internet2.middleware.grouper.ui.actions.SaveGroupAction.doTypes(SaveGroupAction.java:372)

at edu.internet2.middleware.grouper.ui.actions.SaveGroupAction.grouperExecute(SaveGroupAction.java:263)

at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction$1.callback(GrouperCapableAction.java:252)

at edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO$1.callback(Hib3TransactionDAO.java:66)

at edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:700)

at edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO.transactionCallback(Hib3TransactionDAO.java:56)

at edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:87)

at edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:106)

at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.grouperTransactionExecute(GrouperCapableAction.java:246)

at edu.internet2.middleware.grouper.ui.actions.GrouperCapableAction.execute(GrouperCapableAction.java:323)

at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:439)

at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:242)

at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1164)

at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:415)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:230)