grouper-users - RE: [grouper-users] PSPNG creates group in AD with random samaccountname

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] PSPNG creates group in AD with random samaccountname

From: "Sawyer, Mona Zarei" <>
To: "" <>
Cc: "Coleman, Erik C" <>, "" <>
Subject: RE: [grouper-users] PSPNG creates group in AD with random samaccountname
Date: Mon, 23 Oct 2017 16:37:43 +0000
Accept-language: en-US
Authentication-results: spf=none (sender IP is ) ;
Ironport-phdr: 9a23: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
Spamdiagnosticmetadata: NSPM
Spamdiagnosticoutput: 1:99

Ii made the change, but got the same error: groupCreationLdifTemplate = dn:cn=${ grouperUtil.extensionFromName(group.name) } ||objectclass: group ||samAccountName:${grouperUtil.extensionFromName(name)}

2017-10-23 12:33:29,055: [pspng_activedirectory-FullSync-Thread] DEBUG Provisioner.evaluateJexlExpression(538) - - Evaluated Jexl _expression_: testsamacc FROM ${ grouperUtil.extensionFromName(group.name) } WITH variables {idIndex=10183, userSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, groupAttributes={etc:pspng:provision_to=[pspng_activedirectory]}, groupCreationBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, stemAttributes={}, utils=edu.internet2.middleware.grouper.pspng.PspJexlUtils@3149a59d, groupSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, name=UM_External_Groups:testsamacc, provisionerName=pspng_activedirectory, group=Group[name=UM_External_Groups:testsamacc,uuid=48c65309d6934eaca8143a2dbf97a436], provisionerType=LdapGroupProvisioner}

2017-10-23 12:33:29,056: [pspng_activedirectory-FullSync-Thread] DEBUG LdapGroupProvisioner.fetchTargetSystemGroups(388) - - pspng_activedirectory: Searching for 1 groups with:: (|(&(objectclass=group)(cn=testsamacc)))

2017-10-23 12:33:29,056: [pspng_activedirectory-FullSync-Thread] DEBUG LdapSystem.performLdapSearchRequest(424) - - Doing ldap search: [org.ldaptive.SearchFilter@-2105838738::filter=(|(&(objectclass=group)(cn=testsamacc))), parameters={}] / CN=Users,DC=cgcent,DC=miami,DC=edu / [cn, gidNumber, samAccountName, objectclass, member]

2017-10-23 12:33:29,057: [pspng_activedirectory-FullSync-Thread] DEBUG LdapSystem.performLdapSearchRequest(434) - - Using attribute-value paging

2017-10-23 12:33:29,057: [pspng_activedirectory-FullSync-Thread] DEBUG LdapSystem.performLdapSearchRequest(443) - - Using ldap search-result paging

2017-10-23 12:33:29,059: [pspng_activedirectory-FullSync-Thread] DEBUG LdapGroupProvisioner.fetchTargetSystemGroups(402) - - pspng_activedirectory: Group search returned 0 groups

2017-10-23 12:33:29,082: [pspng_activedirectory-FullSync-Thread] DEBUG Provisioner.evaluateJexlExpression(538) - - Evaluated Jexl _expression_: testsamacc FROM ${ grouperUtil.extensionFromName(group.name) } WITH variables {idIndex=10183, userSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, groupAttributes={etc:pspng:provision_to=[pspng_activedirectory]}, groupCreationBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, stemAttributes={}, utils=edu.internet2.middleware.grouper.pspng.PspJexlUtils@3efd0ac2, groupSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, name=UM_External_Groups:testsamacc, provisionerName=pspng_activedirectory, group=Group[name=UM_External_Groups:testsamacc,uuid=48c65309d6934eaca8143a2dbf97a436], provisionerType=LdapGroupProvisioner}

2017-10-23 12:33:29,105: [pspng_activedirectory-FullSync-Thread] DEBUG Provisioner.evaluateJexlExpression(538) - - Evaluated Jexl _expression_: true FROM ${utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to'])} WITH variables {idIndex=10183, userSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, groupAttributes={etc:pspng:provision_to=[pspng_activedirectory]}, groupCreationBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, stemAttributes={}, utils=edu.internet2.middleware.grouper.pspng.PspJexlUtils@343ad075, groupSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, name=UM_External_Groups:testsamacc, provisionerName=pspng_activedirectory, group=Group[name=UM_External_Groups:testsamacc,uuid=48c65309d6934eaca8143a2dbf97a436], provisionerType=LdapGroupProvisioner}

2017-10-23 12:33:29,105: [pspng_activedirectory-FullSync-Thread] DEBUG Provisioner.shouldGroupBeProvisioned(1318) - - pspng_activedirectory: Group UM_External_Groups:testsamacc matches group-selection filter.

2017-10-23 12:33:29,105: [pspng_activedirectory-FullSync-Thread] INFO LdapGroupProvisioner.createGroup(299) - - Creating LDAP group for GrouperGroup: UM_External_Groups:testsamacc

2017-10-23 12:33:29,129: [pspng_activedirectory-FullSync-Thread] DEBUG Provisioner.evaluateJexlExpression(538) - - Evaluated Jexl _expression_: testsamacc FROM ${ grouperUtil.extensionFromName(group.name) } WITH variables {idIndex=10183, userSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, groupAttributes={etc:pspng:provision_to=[pspng_activedirectory]}, groupCreationBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, stemAttributes={}, utils=edu.internet2.middleware.grouper.pspng.PspJexlUtils@56608c0, groupSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, name=UM_External_Groups:testsamacc, provisionerName=pspng_activedirectory, group=Group[name=UM_External_Groups:testsamacc,uuid=48c65309d6934eaca8143a2dbf97a436], provisionerType=LdapGroupProvisioner}

2017-10-23 12:33:29,129: [pspng_activedirectory-FullSync-Thread] DEBUG Provisioner.evaluateJexlExpression(538) - - Evaluated Jexl _expression_: testsamacc FROM ${grouperUtil.extensionFromName(name)} WITH variables {idIndex=10183, userSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, groupAttributes={etc:pspng:provision_to=[pspng_activedirectory]}, groupCreationBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, stemAttributes={}, utils=edu.internet2.middleware.grouper.pspng.PspJexlUtils@56608c0, groupSearchBaseDn=CN=Users,DC=cgcent,DC=miami,DC=edu, name=UM_External_Groups:testsamacc, provisionerName=pspng_activedirectory, group=Group[name=UM_External_Groups:testsamacc,uuid=48c65309d6934eaca8143a2dbf97a436], provisionerType=LdapGroupProvisioner}

2017-10-23 12:33:29,131: [pspng_activedirectory-FullSync-Thread] DEBUG LdapGroupProvisioner.createGroup(329) - - pspng_activedirectory: LDIF for new group (with partial DN): dn:cn=testsamacc ||objectclass: group ||samAccountName:testsamacc

2017-10-23 12:33:29,131: [pspng_activedirectory-FullSync-Thread] DEBUG LdapGroupProvisioner.createGroup(338) - - pspng_activedirectory: Adding group: [dn=cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu[[samAccountName[testsamacc]], [objectclass[group ]]]]

2017-10-23 12:33:29,131: [pspng_activedirectory-FullSync-Thread] INFO LdapProvisioner.performLdapAdd(722) - - pspng_activedirectory: Creating LDAP object: cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu

2017-10-23 12:33:29,132: [pspng_activedirectory-FullSync-Thread] INFO LdapSystem.performLdapAdd(329) - - umldap: Creating LDAP object: cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu

2017-10-23 12:33:29,134: [pspng_activedirectory-FullSync-Thread] ERROR LdapSystem.performLdapAdd(337) - - Problem while creating new ldap object: [dn=cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu[[samAccountName[testsamacc]], [objectclass[group ]]]]

[org.ldaptive.LdapException@1841854468::resultCode=NO_SUCH_ATTRIBUTE, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1, message=javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C090DB1, comment: Error in attribute conversion operation, data 0, v2580 ]; remaining name 'cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu', providerException=javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C090DB1, comment: Error in attribute conversion operation, data 0, v2580 ]; remaining name 'cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu']

at org.ldaptive.provider.ProviderUtils.throwOperationException(ProviderUtils.java:55)

at org.ldaptive.provider.jndi.JndiConnection.processNamingException(JndiConnection.java:619)

at org.ldaptive.provider.jndi.JndiConnection.add(JndiConnection.java:326)

at edu.internet2.middleware.grouper.pspng.LdapSystem.performLdapAdd(LdapSystem.java:335)

at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:725)

at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:340)

at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:47)

at edu.internet2.middleware.grouper.pspng.Provisioner.prepareGroupCache(Provisioner.java:749)

at edu.internet2.middleware.grouper.pspng.Provisioner.startProvisioningBatch(Provisioner.java:475)

at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.processGroup(FullSyncProvisioner.java:598)

at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:256)

at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:188)

at java.lang.Thread.run(Thread.java:745)

Caused by: javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C090DB1, comment: Error in attribute conversion operation, data 0, v2580 ]; remaining name 'cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu'

at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3110)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3035)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2841)

at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapCtx.java:812)

at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(ComponentDirContext.java:337)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:266)

at org.ldaptive.provider.jndi.JndiConnection.add(JndiConnection.java:315)

... 10 more

2017-10-23 12:33:29,135: [pspng_activedirectory-FullSync-Thread] ERROR LdapGroupProvisioner.createGroup(346) - - Problem while creating new group: dn:cn=testsamacc

objectclass: group

samAccountName:testsamacc

edu.internet2.middleware.grouper.pspng.PspException: LDAP problem creating object: javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 - 00000057: LdapErr: DSID-0C090DB1, comment: Error in attribute conversion operation, data 0, v2580 ]; remaining name 'cn=testsamacc ,CN=Users,DC=cgcent,DC=miami,DC=edu'

at edu.internet2.middleware.grouper.pspng.LdapSystem.performLdapAdd(LdapSystem.java:338)