Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] [PSPNG] Not deleting groups in LDAP

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] [PSPNG] Not deleting groups in LDAP


Chronological Thread 
  • From: Yoann Delattre <>
  • To: Jeffrey Williams <>
  • Cc: "" <>
  • Subject: Re: [grouper-users] [PSPNG] Not deleting groups in LDAP
  • Date: Mon, 11 Dec 2017 16:02:36 +0100
  • Dkim-filter: OpenDKIM Filter v2.11.0 webmail.ac-lille.fr 3CDAFCEE83
  • Ironport-phdr: 9a23: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

grouperIsAuthoritative was set to true.
So i tried set it to false, and now it works...Strange :-/

maybe something wrong with my conf ?

changeLog.consumer.pspng_brancheGrouper.class = edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim
changeLog.consumer.pspng_brancheGrouper.type = edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner
changeLog.consumer.pspng_brancheGrouper.quartzCron = 0 * * * * ?
changeLog.consumer.pspng_brancheGrouper.ldapPoolName = aclille
changeLog.consumer.pspng_brancheGrouper.memberAttributeName = uniqueMember
changeLog.consumer.pspng_brancheGrouper.memberAttributeValueFormat = ${ldapUser.getDn()}
changeLog.consumer.pspng_brancheGrouper.groupSearchBaseDn = ou=Grouper,ou=xxxxx,o=yyyy,c=zz
changeLog.consumer.pspng_brancheGrouper.allGroupsSearchFilter = objectclass=groupOfUniqueNames
changeLog.consumer.pspng_brancheGrouper.singleGroupSearchFilter = (&(objectclass=groupOfUniqueNames)(cn=${group.name}))
changeLog.consumer.pspng_brancheGrouper.groupSearchAttributes = cn,objectclass
changeLog.consumer.pspng_brancheGrouper.groupCreationLdifTemplate = dn: cn=${group.name}||cn: ${group.name}||objectclass: groupOfUniqueNames||objectclass: educationnationale
changeLog.consumer.pspng_brancheGrouper.userSearchBaseDn = ou=people,ou=xxxxx,o=yyyy,c=zz
changeLog.consumer.pspng_brancheGrouper.userSearchFilter = uid=${subject.id}
changeLog.consumer.pspng_brancheGrouper.grouperIsAuthoritative = false

Thanks for your help !

Yoann

Le 11/12/2017 à 15:18, Jeffrey Williams a écrit :
Hi Yoann,

My first thought was whether you had grouperIsAuthoritative set?

Should groups in the groupSearchBaseDn/allGroupSearchFilter be removed if they no longer exist in Grouper?

By default, it is set to FALSE, which sounds like the behavior you're experiencing.

On Mon, Dec 11, 2017 at 9:11 AM, Yoann Delattre <> wrote:

Hello everyone,

i have a problem with the PSPNG : a group deleted in Grouper are not deleted in LDAP.
It's weird because i have no problem when i create groups or delete members : all this changes are provisioned correctly in the LDAP.

I get this in the log :

2017-12-11 11:39:00,045: [DefaultQuartzScheduler_Worker-9] INFO  ProvisioningWorkItem.setStatus(143) -  - Work item handled: ProvisioningWorkItem[successful=true,msg=Ignoring work item because group is not provisioned,clog=clog #3921904 / ChangeLog type: group: deleteGroup,group=test-pspng4:test-2]

Anyone encounter this issue ?

Thanks for your help,
Yoann

--




--
Jeffrey Williams, Identity Management Specialist
Identity Architecture, ITS
University of North Carolina at Greensboro
256-TECH (256-8324)




Archive powered by MHonArc 2.6.19.

Top of Page