Skip to Content.
Sympa Menu

grouper-users - [grouper-users] pspng protocol

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] pspng protocol

Chronological Thread 
  • From: Emilio Recio <>
  • To: "" <>
  • Subject: [grouper-users] pspng protocol
  • Date: Sun, 3 Sep 2017 06:45:36 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23:2XU0KBIUWXNLQbz6sNmcpTZWNBhigK39O0sv0rFitYgeIvnxwZ3uMQTl6Ol3ixeRBMOAuqIC07KempujcFRI2YyGvnEGfc4EfD4+ouJSoTYdBtWYA1bwNv/gYn9yNs1DUFh44yPzahANS47xaFLIv3K98yMZFAnhOgppPOT1HZPZg9iq2+yo9ZDeZwZFiCChbb9uMR67sRjfus4KjIV4N60/0AHJonxGe+RXwWNnO1eelAvi68mz4ZBu7T1et+ou+MBcX6r6eb84TaFDAzQ9L281/szrugLdQgaJ+3ART38ZkhtMAwjC8RH6QpL8uTb0u+ZhxCWXO9D9QLYpUjqg8qhrUgflhicZOTAk7GHZhM9+jKNHrx2uvBFw2ZLYbJ2POfZiYq/Qf9UXTndBUMZLUCxBB5uxYYQKD+oAOeZYro79rEYSoxSgGQasBeTvwSJPi3H52K060uAhEQDB3AA6A9wBrmjbrNTyNKoJU+C60qfIzTvdYPNMwjf9747Ifgo/rv6RQLJ9aMzcwlQhGQPCi1Wfs43lPzWN2+QVqWeb9PZgWvy0hG4mrQF9uCSgxsApioTPm4kbyUjE+D1kzIs6J9C0UlN3bNG4HJdKqS2WK5F6Tt4iTmxroCo217ILtJyhcCQXx5kr2wTTZ+KJfoWG+B7vSeecLS9miH55er+znRm//Em6xuHhV8S53kxGojdHn9TKq3sDzQbc6tKdRft45kqh2SiA1wTU6uxcLkE0i6/bJ4M/zrMyjJYTs1rMHiH4mErolq+WbUIk+u6y5+v5f7rmu4eQN45yig7gLqQjgtGzDOs6PwQUQmSW9viw2Kf98UHlWrlGk/07n6rBvJDfP8sbp6q5AwFP0oYk7hayFymp0NEZnXkDLVJFfwiLj5L3NF7SIfD4Cuyyg1aynzdlyfDJIKfhAo7KLnjFirvuY6ty61NExAop0d9f/45UCq0GIP/rVU/xrtvYDgIhMwOq2ebrEch91pgAVmKVGa+UK6fSsV6T5uIzOOmAepUZuDf7K/g5+fHul3k5lkEBfaW3x5cYdm23Huk1a3meNDDjmNAcCWoQ+xclQfbxoFyETTNJYXuuBeQx6ixxQNapF4DeXo23xaGa0T2gNpxQem1cDF2QSzHle5jSCNkWbyfHD8pglj0DHYKsQI4mnUWDsQ7+yr0hFOff+yowt5/t2tVv/OrV0xw+6GonXIymz2iRQjQszSszTDgs0fUnrA==
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

So we have pspng provisioning to an LDAP server. However, the ldapserver is just an interface (via TDI née Metamerge). Command line tools against the ldapserver works as expected. However with pspng it seems to create 5-7 connections to the ldap server and keeps them open. Sometimes it connects, gets a server capability or meta request (e.g.: ldapsearch -s base (objectClass=*) with no basedn) and then drops the connection with no more queries.

In short, is there documentation on how pspng provisions, such that I can give it a decent reply? Why does it connect and hold the connections open? Why does it spawn a new thread to just disconnect, etc.

The following link basically shows the interaction from TDI's perspective. All I did was add one person to the grouper group. (Please note the configuration stanza for the provisioning is incorrect, it mentions cn={} it should be cn= whatever the user's display name is. However at this point one thing at a time 😊 )

FYI: AL/LL/LSC.0 (.0, .1, etc are socket connection threads from grouper)

See the following pastebin as a log of the :

Any behind-the-scenes documentation on the exact procedure used for provisioning groups / users to groups etc would be helpful.


The information contained in this transmission contains privileged and confidential information. It is intended only for the use of the person named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

CAUTION: Intended recipients should NOT use email communication for emergent or urgent health care matters.

  • [grouper-users] pspng protocol, Emilio Recio, 09/03/2017

Archive powered by MHonArc 2.6.19.

Top of Page