Grouper Users - Open Discussion List

["Bee-Lindgren, Bert" <>]

Ben,

> We have external users who are identified by email address.

> ...

> 2) PSP gives an error

PSPNG might already be able to work with these subjects, and if it can't, will likely be addressed by our active work to escape DN-relevant characters. However, I'll need some more information about what PSP is doing for you:

a) What is the target LDAP server? (AD, OpenLdap/389ds/OpenDj, or something else)

b) What are your account/subject DN formats?

c) What group objectclass(es) are you maintaining? (Briefly) How do these subjects' email addresses play into the provisioning process?

This will allow an accurate of your non-question of PSPNG's support for these subjects.  It will also help scope what would have to change in PSP (if totally necessary).

Thanks,

  Bert

---

From: <> on behalf of Ben Beecher <>
Sent: Wednesday, June 14, 2017 9:58 AM
To:
Subject: [grouper-users] plus signs in email addresses

 

We have external users who are identified by email address. If the email address contains a plus sign we have two problems:

(1) The user interface gives "Error: cannot find subject" when we click on the external user. To fix this Grouper would need to URL encode the plus sign in the HREF link (change plus to %2B).

(2) PSP gives an error code 21 when it tries to write this group member to the LDAP database:

2017-06-09 13:47:00 ERROR PspChangeLogConsumer:504 - PSP Consumer 'psp' - An error occurred processing sequence number 300278513

edu.internet2.middleware.psp.PspException: SyncResponse[id=cu:app:maillist:slate-inbox,status=failure,error=customError,errorMessages={[LDAP: error code 21 - member: value #0 invalid per syntax]},requestID=2017/06/09-13:47:00.066,AddResponse[pso=<null>,status=failure,error=customError,errorMessages={[LDAP: error code 21 - member: value #0 invalid per syntax]},requestID=2017/06/09-13:47:00.162]]

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.executeSync(PspChangeLogConsumer.java:305)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processGroupAdd(PspChangeLogConsumer.java:665)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer$EventType$3.process(PspChangeLogConsumer.java:103)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntry(PspChangeLogConsumer.java:572)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntries(PspChangeLogConsumer.java:499)

        at edu.internet2.middleware.grouper.changeLog.ChangeLogHelper.processRecords(ChangeLogHelper.java:245)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderType$4.runJob(GrouperLoaderType.java:652)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:418)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:318)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

2017-06-09 13:48:00 ERROR PspChangeLogConsumer:504 - PSP Consumer 'psp' - An error occurred processing sequence number 300278528

edu.internet2.middleware.psp.PspException: edu.internet2.middleware.psp.PspNoSuchIdentifierException: Psp 'psp' - Has reference from 'PSOIdentifier[id='cn=cu:app:maillist:slate-inbox,ou=Groups,ou=Grouper,o=Columbia University,c=US',targetID=ldap,containerID=<null>]' to 'Reference[toPsoID=PSOIdentifier[id='mail=',targetID=ldap,containerID=<null>],type=member]' SearchResponse[psos=0,status=failure,error=noSuchIdentifier,errorMessages={[LDAP: error code 32 - No Such Object]},requestID=2017/06/09-13:48:00.092]

Can these problems be fixed so that plus signs are handled correctly in the email address or do we need to remove these external users from our Grouper database?

Ben