Grouper Users - Open Discussion List

[Siju Jacob <>]

Hi,

    I am new to grouper, We are trying to develop a prototype, where we load member from our person registry schema to our grouper oracle schema using grouper loader. 1^st step is working  but the second step is to provision the members from grouper schema to active directory.

If I try to do it with sync command (gsh -psp -sync 529124) member gets pushed to active directory.

         When I try to push it using bulkSynch (gsh -psp -bulkSync OIT:Apps:Sharepoint:SOR) or gsh – loader I am getting already exists error although the member is not there in Active Directory.

 

All the configurations is based on below url

 

https://spaces.internet2.edu/pages/viewpage.action?pageId=25204227#GrouperProvisioningServiceProvider(PSP)-ConfigurationExample:GroupertoActiveDirectory

 

we are using below api binary version.

 

grouper.apiBinary-2.2.0

 

below is the request and response. Could you please help to sort out this issue.

 

2017-12-11 14:46:09,875: [main] INFO  BaseSpmlProvider.execute(153) -  - Target 'ldap1' - Add AddRequest[psoID=PSOIdentifier[id='CN=SOR,OU=Box,OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu',targetID=ldap1,containerID=<null>],targetID=ldap1,returnData=everything,requestID=2017/12/11-14:46:09.873]

2017-12-11 14:46:09,876: [main] INFO  BaseSpmlProvider.execute(157) -  - Target 'ldap1' - Add XML:

<addRequest xmlns='urn:oasis:names:tc:SPML:2:0' entityName='group' requestID='2017/12/11-14:46:09.873' targetId='ldap1' returnData='everything'>

  <psoID ID='CN=SOR,OU=Box,OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu' targetID='ldap1'/>

  <data>

    <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='objectClass'>

      <dsml:value>top</dsml:value>

      <dsml:value>group</dsml:value>

    </dsml:attr>

    <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='cn'>

      <dsml:value>SOR</dsml:value>

    </dsml:attr>

    <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='sAMAccountName'>

      <dsml:value>SOR</dsml:value>

    </dsml:attr>

  </data>

  <capabilityData mustUnderstand='true' capabilityURI='urn:oasis:names:tc:SPML:2:0:reference'>

    <spmlref:reference xmlns='urn:oasis:names:tc:SPML:2:0' xmlns:spmlref='urn:oasis:names:tc:SPML:2:0:reference' typeOfReference='member'>

      <spmlref:toPsoID ID='CN=sj702qweqeq,OU=Users,OU=Box,OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu' targetID='ldap1'/>

    </spmlref:reference>

    <spmlref:reference xmlns='urn:oasis:names:tc:SPML:2:0' xmlns:spmlref='urn:oasis:names:tc:SPML:2:0:reference' typeOfReference='member'>

      <spmlref:toPsoID ID='CN=oalmaqweqtar,OU=Users,OU=Box,OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu' targetID='ldap1'/>

    </spmlref:reference>

    <spmlref:reference xmlns='urn:oasis:names:tc:SPML:2:0' xmlns:spmlref='urn:oasis:names:tc:SPML:2:0:reference' typeOfReference='member'>

      <spmlref:toPsoID ID='CN=dv112312,OU=Users,OU=Box,OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu' targetID='ldap1'/>

    </spmlref:reference>

    <spmlref:reference xmlns='urn:oasis:names:tc:SPML:2:0' xmlns:spmlref='urn:oasis:names:tc:SPML:2:0:reference' typeOfReference='member'>

      <spmlref:toPsoID ID='CN=nhs31231234,OU=Users,OU=Box,OU=Apps,OU=Groups,DC=adpoc,DC=rutgers,DC=edu' targetID='ldap1'/>

    </spmlref:reference>

  </capabilityData>

</addRequest>

 

2017-12-11 14:46:09,884: [main] ERROR BaseSpmlProvider.execute(188) -  - Target 'ldap1' - Add AddResponse[pso=<null>,status=failure,error=alreadyExists,errorMessages={[LDAP: error code 68 - 00000524: UpdErr: DSID-031A1261, problem 6005 (ENTRY_EXISTS), data 0

_]},requestID=2017/12/11-14:46:09.873]

2017-12-11 14:46:09,884: [main] ERROR BaseSpmlProvider.execute(190) -  - Target 'ldap1' - Add XML:

<addResponse xmlns='urn:oasis:names:tc:SPML:2:0' status='failure' requestID='2017/12/11-14:46:09.873' error='alreadyExists'>

  <errorMessage>[LDAP: error code 68 - 00000524: UpdErr: DSID-031A1261, problem 6005 (ENTRY_EXISTS), data 0

_]</errorMessage>

</addResponse>

Thanks,

siju