Grouper Users - Open Discussion List

[Ben Beecher <>]

Bert,

Eventually we will move to PSPNG but we are not able to do that yet. If you can modify PSP so that these email addresses are ignored with no error that would solve this problem for us.

target LDAP is OpenLdap

we use this base DN for groups

edu.internet2.middleware.psp.groupsBaseDn=ou=Groups,ou=Grouper,o=Columbia University,c=US

we use this base DN for subjects

edu.internet2.middleware.psp.peopleBaseDn=ou=People,o=Columbia University,c=US

object class is groupOfNames, here is a sample entry with one normal subject and one external subject

dn: cn=cu:app:maillist:sciencefictionmovieclub,ou=Groups,ou=Grouper,o=Columbia University,c=US

objectClass: groupOfNames

objectClass: top

cn: cu:app:maillist:sciencefictionmovieclub

member: uni=abc1234,ou=People,o=Columbia University,c=US

member: mail=

Ben

On Wed, Jun 14, 2017 at 10:11 AM, Bee-Lindgren, Bert <> wrote:

Ben,

> We have external users who are identified by email address.

> ...

> 2) PSP gives an error

PSPNG might already be able to work with these subjects, and if it can't, will likely be addressed by our active work to escape DN-relevant characters. However, I'll need some more information about what PSP is doing for you:

a) What is the target LDAP server? (AD, OpenLdap/389ds/OpenDj, or something else)

b) What are your account/subject DN formats?

c) What group objectclass(es) are you maintaining? (Briefly) How do these subjects' email addresses play into the provisioning process?

This will allow an accurate of your non-question of PSPNG's support for these subjects.  It will also help scope what would have to change in PSP (if totally necessary).

Thanks,

  Bert

---

From: <> on behalf of Ben Beecher <>
Sent: Wednesday, June 14, 2017 9:58 AM
To:
Subject: [grouper-users] plus signs in email addresses

 

We have external users who are identified by email address. If the email address contains a plus sign we have two problems:

(1) The user interface gives "Error: cannot find subject" when we click on the external user. To fix this Grouper would need to URL encode the plus sign in the HREF link (change plus to %2B).

(2) PSP gives an error code 21 when it tries to write this group member to the LDAP database:

2017-06-09 13:47:00 ERROR PspChangeLogConsumer:504 - PSP Consumer 'psp' - An error occurred processing sequence number 300278513

edu.internet2.middleware.psp.PspException: SyncResponse[id=cu:app:maillist:slate-inbox,status=failure,error=customError,errorMessages={[LDAP: error code 21 - member: value #0 invalid per syntax]},requestID=2017/06/09-13:47:00.066,AddResponse[pso=<null>,status=failure,error=customError,errorMessages={[LDAP: error code 21 - member: value #0 invalid per syntax]},requestID=2017/06/09-13:47:00.162]]

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.executeSync(PspChangeLogConsumer.java:305)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processGroupAdd(PspChangeLogConsumer.java:665)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer$EventType$3.process(PspChangeLogConsumer.java:103)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntry(PspChangeLogConsumer.java:572)

        at edu.internet2.middleware.psp.grouper.PspChangeLogConsumer.processChangeLogEntries(PspChangeLogConsumer.java:499)

        at edu.internet2.middleware.grouper.changeLog.ChangeLogHelper.processRecords(ChangeLogHelper.java:245)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderType$4.runJob(GrouperLoaderType.java:652)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:418)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:318)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

2017-06-09 13:48:00 ERROR PspChangeLogConsumer:504 - PSP Consumer 'psp' - An error occurred processing sequence number 300278528

edu.internet2.middleware.psp.PspException: edu.internet2.middleware.psp.PspNoSuchIdentifierException: Psp 'psp' - Has reference from 'PSOIdentifier[id='cn=cu:app:maillist:slate-inbox,ou=Groups,ou=Grouper,o=Columbia University,c=US',targetID=ldap,containerID=<null>]' to 'Reference[toPsoID=PSOIdentifier[id='mail=',targetID=ldap,containerID=<null>],type=member]' SearchResponse[psos=0,status=failure,error=noSuchIdentifier,errorMessages={[LDAP: error code 32 - No Such Object]},requestID=2017/06/09-13:48:00.092]

Can these problems be fixed so that plus signs are handled correctly in the email address or do we need to remove these external users from our Grouper database?

Ben