Grouper Users - Open Discussion List

[Dave Churchley <>]

Hi

I'm currently testing PSPNG provisioning to a test AD. So far, I really like 
what I see but I've now run into a couple of snags. 

1. I get an error when the Grouper group name has multiple consecutive 
asterisks, eg LIBR_Auto_CEG****. The old PSP service could handle this group 
name. I've attached the an extract from grouper_error.log to show the error.

2. Related to the above, when the full sync can't provision a group, it 
appears to get stuck and retry ever second. This means that it will never 
complete. I think it would be preferable to write a nice error and then skip 
that group. 

I'm not sure if these are real issues or if I'm doing something wrong, so any 
advice would be appreciated! Also, is there a gsh command to force PSPNG to 
sync a specific group? Similar to the old PSP?

Thanks
Dave

Dave Churchley
Newcastle University
2017-07-18 14:59:57,953: [pspng_activedirectory-FullSync-Thread] INFO  
FullSyncProvisioner.processGroup(595) -  - pspng_activedirectory-FullSync: 
Starting Full-Sync (Scheduled full sync) of group 
Applications:LIBR:Reading_Lists:F-FSAG:D-CIVG:CEG:LIBR_Auto_CEG****
2017-07-18 14:59:57,990: [pspng_activedirectory-FullSync-Thread] ERROR 
LdapObject.matchesLdapFilter(261) -  - Problem checking ldap filter in 
memory: 
[org.ldaptive.SearchFilter@1648164876::filter=(&(objectclass=group)(cn=LIBR_Auto_CEG****)),
 parameters={}]
LDAPException(resultCode=87 (filter error), errorMessage='Unexpected double 
asterisk encountered in the substring filter component starting at position 
21.')
        at com.unboundid.ldap.sdk.Filter.create(Filter.java:1654)
        at com.unboundid.ldap.sdk.Filter.parseFilterComps(Filter.java:1808)
        at com.unboundid.ldap.sdk.Filter.create(Filter.java:1200)
        at com.unboundid.ldap.sdk.Filter.create(Filter.java:1111)
        at 
edu.internet2.middleware.grouper.pspng.LdapObject.matchesLdapFilter(LdapObject.java:256)
        at 
edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.fetchTargetSystemGroups(LdapGroupProvisioner.java:415)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(Provisioner.java:695)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(Provisioner.java:473)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:598)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:256)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:188)
        at java.lang.Thread.run(Thread.java:745)
2017-07-18 14:59:57,991: [pspng_activedirectory-FullSync-Thread] WARN  
Provisioner.prepareGroupCache(701) -  - Batch-fetching group information 
failed. Trying fetching information for each group individually
edu.internet2.middleware.grouper.pspng.PspException: Problem checking ldap 
filter {}: 
[org.ldaptive.SearchFilter@1648164876::filter=(&(objectclass=group)(cn=LIBR_Auto_CEG****)),
 parameters={}]
        at 
edu.internet2.middleware.grouper.pspng.LdapObject.matchesLdapFilter(LdapObject.java:262)
        at 
edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.fetchTargetSystemGroups(LdapGroupProvisioner.java:415)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(Provisioner.java:695)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(Provisioner.java:473)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:598)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:256)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:188)
        at java.lang.Thread.run(Thread.java:745)
2017-07-18 14:59:58,026: [pspng_activedirectory-FullSync-Thread] ERROR 
LdapObject.matchesLdapFilter(261) -  - Problem checking ldap filter in 
memory: 
[org.ldaptive.SearchFilter@1648164876::filter=(&(objectclass=group)(cn=LIBR_Auto_CEG****)),
 parameters={}]
LDAPException(resultCode=87 (filter error), errorMessage='Unexpected double 
asterisk encountered in the substring filter component starting at position 
21.')
        at com.unboundid.ldap.sdk.Filter.create(Filter.java:1654)
        at com.unboundid.ldap.sdk.Filter.parseFilterComps(Filter.java:1808)
        at com.unboundid.ldap.sdk.Filter.create(Filter.java:1200)
        at com.unboundid.ldap.sdk.Filter.create(Filter.java:1111)
        at 
edu.internet2.middleware.grouper.pspng.LdapObject.matchesLdapFilter(LdapObject.java:256)
        at 
edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.fetchTargetSystemGroups(LdapGroupProvisioner.java:415)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.fetchTargetSystemGroup(Provisioner.java:856)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(Provisioner.java:706)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(Provisioner.java:473)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:598)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:256)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:188)
        at java.lang.Thread.run(Thread.java:745)
2017-07-18 14:59:58,026: [pspng_activedirectory-FullSync-Thread] ERROR 
Provisioner.prepareGroupCache(710) -  - Problem fetching information on group 
'Applications:LIBR:Reading_Lists:F-FSAG:D-CIVG:CEG:LIBR_Auto_CEG****'
edu.internet2.middleware.grouper.pspng.PspException: Problem checking ldap 
filter {}: 
[org.ldaptive.SearchFilter@1648164876::filter=(&(objectclass=group)(cn=LIBR_Auto_CEG****)),
 parameters={}]
        at 
edu.internet2.middleware.grouper.pspng.LdapObject.matchesLdapFilter(LdapObject.java:262)
        at 
edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.fetchTargetSystemGroups(LdapGroupProvisioner.java:415)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.fetchTargetSystemGroup(Provisioner.java:856)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(Provisioner.java:706)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(Provisioner.java:473)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:598)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:256)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:188)
        at java.lang.Thread.run(Thread.java:745)
2017-07-18 14:59:58,027: [pspng_activedirectory-FullSync-Thread] ERROR 
FullSyncProvisioner.processGroup(617) -  - pspng_activedirectory-FullSync: 
Problem doing full sync. Requeuing group 
Applications:LIBR:Reading_Lists:F-FSAG:D-CIVG:CEG:LIBR_Auto_CEG****
java.lang.RuntimeException: Problem fetching information on group 
Applications:LIBR:Reading_Lists:F-FSAG:D-CIVG:CEG:LIBR_Auto_CEG****
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(Provisioner.java:711)
        at 
edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(Provisioner.java:473)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:598)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:256)
        at 
edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:188)
        at java.lang.Thread.run(Thread.java:745)