Grouper Users - Open Discussion List

[Dave Churchley <>]

Hello again

 

Following on from point 1 below, I’d like to add a name change to the list as well. When we change the name of a group we get something like this in grouper_error.log and no changes in AD:

 

Work item handled: ProvisioningWorkItem[successful=true,msg=Nothing to do (not a supported change),clog=clog #4279617 / ChangeLog type: group: updateGroup]

 

Is what constitutes a “supported change” configurable?

 

If we subsequently add more members to the group, we get a new group in AD, with the new name and only containing the new members. The old group, with the old members, remains in AD. I’m sure this can’t be expected behaviour?

 

Thanks
Dave

 

From: [mailto:] On Behalf Of Dave Churchley
Sent: 26 July 2017 17:22
To: Bee-Lindgren, Bert <>; Grouper-Users <>
Subject: [grouper-users] RE: PSPNG issues

 

Thanks Bert

 

Are also you able to provide any comments or advice on the other issues I’m facing?

 

1.       When I move or delete a group in Grouper, that change is not going through to AD

2.       When PSP-NG can’t update AD, the whole process gets stuck and no other updates go through. It doesn’t skip the one it’s having a problem with.

 

As I said before, I’m not sure if this is an issue with PSP-NG or with my config so any advice would be welcome!

 

Thanks
Dave

 

 

From: Bee-Lindgren, Bert []
Sent: 26 July 2017 16:41
To: Dave Churchley <>; Grouper-Users <>
Subject: Re: PSPNG issues

 

bushyDn should already do all the escaping that is necessary. It was tested with OU commas and escapleLdapRdn was tested with group-name commas, but I'm duplicating and patching the problem with bushyDn and group-name commas/pluses. 

 

---

From: <> on behalf of Dave Churchley <>
Sent: Tuesday, July 25, 2017 12:13 PM
To: Grouper-Users
Subject: [grouper-users] RE: PSPNG issues

 

Good afternoon

I see that Bert has released a patch for issue https://bugs.internet2.edu/jira/browse/GRP-1533

I've installed the patch but I'm still seeing the same issue (with  + and , for example).

I suspect that I need to do something with utils.escapeLdapRdn(string) in grouper-loader.properties. I've tried various things but haven't been able to work it out yet. Any advice, please?

I've attached the relevant part of grouper-loader.properties.

Thanks
Dave

>-----Original Message-----
>From: [mailto:grouper-users-
>] On Behalf Of Dave Churchley
>Sent: 19 July 2017 14:43
>To: Grouper-Users <>
>Subject: [grouper-users] RE: PSPNG issues
>
>Just to add to number 1 below, it seems that PSPNG also struggles with plus
>signs, parentheses and spaces in group names. This could be related to
>https://bugs.internet2.edu/jira/browse/GRP-1533?
>
>Thanks
>Dave
>
>>-----Original Message-----
>>From: [mailto:grouper-users-
>>] On Behalf Of Dave Churchley
>>Sent: 18 July 2017 16:56
>>To: Grouper-Users <>
>>Subject: [grouper-users] PSPNG issues
>>
>>Hi
>>
>>I'm currently testing PSPNG provisioning to a test AD. So far, I really like what
>I
>>see but I've now run into a couple of snags.
>>
>>1. I get an error when the Grouper group name has multiple consecutive
>>asterisks, eg LIBR_Auto_CEG****. The old PSP service could handle this
>group
>>name. I've attached the an extract from grouper_error.log to show the
>error.
>>
>>2. Related to the above, when the full sync can't provision a group, it appears
>>to get stuck and retry ever second. This means that it will never complete. I
>>think it would be preferable to write a nice error and then skip that group.
>>
>>I'm not sure if these are real issues or if I'm doing something wrong, so any
>>advice would be appreciated! Also, is there a gsh command to force PSPNG
>to
>>sync a specific group? Similar to the old PSP?
>>
>>Thanks
>>Dave
>>
>>Dave Churchley
>>Newcastle University