Grouper Users - Open Discussion List

[Satya Mohapatra <>]

FYI - I figured it out.  It was a bad configuration on my part which was mixing up baseDn and baseStem while not properly sourcing from ldap.properties from source.xml. 

So please ignore my earlier mail below. 

Thanks, 

---
Satya Mohapatra, ସତ୍ୟ ମହାପାତ୍ର, सत्य महापात्र,  ستیا موہپترا

LIGO laboratory @ MIT

On Dec 14, 2017, at 10:44 AM, Satya Mohapatra <> wrote:

Hi,

Any help with the following will be greatly appreciated. 

This is regarding system which is running grouper version 2.1.5.

With ./gsh.sh -psp -sync  any -entityName member calc/sync is working fine and correct group membership is calculated and synced with the target ldap. 

When I do the same for a group object 

i.e.  ./gsh.sh -psp -sync a:b:c -entityName group 

it is unable to calculate that object. 

  * The target is an openldap server with bushy structure. 

  * ldap.properties has the following set up. 

edu.internet2.middleware.psp.groupObjectClass=groupOfNames

edu.internet2.middleware.psp.groupsBaseDn=ou=grouper,dc=ligo,dc=org

edu.internet2.middleware.psp.peopleBaseDn=ou=people,dc=ligo,dc=org                                      

edu.internet2.middleware.psp.cnSourceAttributeID=extension

Debug message below:

-------------------

2017-12-14 07:36:45,820: [main] INFO  Psp.execute(1140) -  - Psp 'psp' - Diff DiffRequest[id=a:b:c,requestID=2017/12/14-07:36:45.820,returnData=everything]

2017-12-14 07:36:45,821: [main] INFO  Psp.execute(1144) -  - Psp 'psp' - Diff XML:

<psp:diffRequest xmlns:psp='http://grouper.internet2.edu/psp' requestID='2017/12/14-07:36:45.820' returnData='everything'>

  <psp:id ID='a:b:c'/>

</psp:diffRequest>

2017-12-14 07:36:45,821: [main] INFO  Psp.execute(980) -  - Psp 'psp' - Calc CalcRequest[id=a:b:c,requestID=2017/12/14-07:36:45.821,returnData=everything]

2017-12-14 07:36:45,822: [main] INFO  Psp.execute(984) -  - Psp 'psp' - Calc XML:

<psp:calcRequest xmlns:psp='http://grouper.internet2.edu/psp' requestID='2017/12/14-07:36:45.821' returnData='everything'>

  <psp:id ID='a:b:c'/>

</psp:calcRequest>

2017-12-14 07:36:45,824: [main] DEBUG Psp.execute(1069) -  - PSP 'psp' - Calc CalcRequest[id=a:b:c,requestID=2017/12/14-07:36:45.821,returnData=everything] Resolving attributes '[stemDn, stemDnAlternateChangeLog, stemObjectclass, stemOu, stemDescription, stemSeeAlso, groupDn, groupDnAlternate, groupDnAlternateChangeLog, groupObjectclass, cn, groupDescription, hasMember, groupIsMemberOf, mailLocalAddress, membersLdap, membersGsa, members-jdbc, memberDn, memberObjectclass, memberIsMemberOf, changeLogMembershipGroupDn, changeLogMembershipSubjectName, changeLogMembershipLdapSubjectId, changeLogMembershipGroupSubjectName, changeLogMembershipMemberDn, changeLogMembershipGroupName, changeLogMembershipGroupMemberDn]'.

2017-12-14 07:36:45,824: [main] DEBUG SimpleAttributeAuthority.getAttributes(86) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority'

2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'DeleteStemChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'DeleteStemChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateStemNameChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateStemNameChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,830: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateStemDescriptionChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,830: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateStemDescriptionChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,830: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'StemAttributeAssignValueChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,831: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'StemAttributeAssignValueChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,831: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'stemDn' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,831: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'stemDn' - Resolve principal 'a:b:c' No dependencies

2017-12-14 07:36:45,832: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'stemDnAlternateChangeLog' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,832: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'stemDnAlternateChangeLog' - Resolve principal 'a:b:c' No dependencies

2017-12-14 07:36:45,854: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'DeleteGroupChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,854: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'DeleteGroupChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,854: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateGroupNameChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateGroupNameChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateGroupDescriptionChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateGroupDescriptionChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'GroupAttributeAssignValueChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,856: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'GroupAttributeAssignValueChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,856: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'groupDn' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,856: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'groupDn' - Resolve principal 'a:b:c' No dependencies

2017-12-14 07:36:45,856: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'groupDnAlternate' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,857: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'groupDnAlternate' - Resolve principal 'a:b:c' No dependencies

2017-12-14 07:36:45,857: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'groupDnAlternateChangeLog' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,857: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'groupDnAlternateChangeLog' - Resolve principal 'a:b:c' No dependencies

2017-12-14 07:36:45,872: [main] DEBUG LdapSourceAdapter.getLdapResultsHelper(670) -  - searchType: searchSubject, filter: (& (krbPrincipalName=a:b:c)(objectclass=inetOrgPerson))

2017-12-14 07:36:45,874: [main] DEBUG PsoIdentifierAttributeDefinition.doResolve(50) -  - PSOIdentifier attribute definition 'memberDn' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,875: [main] DEBUG LdapSourceAdapter.getLdapResultsHelper(670) -  - searchType: searchSubject, filter: (& (krbPrincipalName=a:b:c)(objectclass=inetOrgPerson))

2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'AddMembershipChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'AddMembershipChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'DeleteMembershipChangeLogDataConnector' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'DeleteMembershipChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix

2017-12-14 07:36:45,878: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupDn' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,878: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupDn' - Resolve principal 'a:b:c' No dependencies

2017-12-14 07:36:45,897: [main] DEBUG PsoIdentifierAttributeDefinition.doResolve(50) -  - PSOIdentifier attribute definition 'changeLogMembershipMemberDn' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,897: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupMemberDn' - Resolve principal 'a:b:c'

2017-12-14 07:36:45,898: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupMemberDn' - Resolve principal 'a:b:c' No dependencies

2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'groupObjectclass' : top

2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'groupObjectclass' : groupOfNames

2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'groupObjectclass' : eduMember

2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'memberObjectclass' : eduMember

2017-12-14 07:36:45,899: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'stemObjectclass' : top

2017-12-14 07:36:45,899: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'stemObjectclass' : organizationalUnit

2017-12-14 07:36:45,899: [main] DEBUG Psp.execute(1072) -  - PSP 'psp' - Calc CalcRequest[id=a:b:c,requestID=2017/12/14-07:36:45.821,returnData=everything] Resolved attributes '[groupObjectclass, memberObjectclass, stemObjectclass]'.

2017-12-14 07:36:45,899: [main] DEBUG Pso.getPSO(222) -  - Pso 'stem' - Get pso for 'a:b:c'

2017-12-14 07:36:45,899: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'stemDn' - Source attribute 'stemDn' does not exist

2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(229) -  - Pso 'stem' - Unable to calculate pso identifier for 'a:b:c'

2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(222) -  - Pso 'group' - Get pso for 'a:b:c'

2017-12-14 07:36:45,900: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'groupDn' - Source attribute 'groupDn' does not exist

2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(229) -  - Pso 'group' - Unable to calculate pso identifier for 'a:b:c'

2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(222) -  - Pso 'member' - Get pso for 'a:b:c'

2017-12-14 07:36:45,901: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'memberDn' - Source attribute 'memberDn' does not exist

2017-12-14 07:36:45,901: [main] DEBUG Pso.getPSO(229) -  - Pso 'member' - Unable to calculate pso identifier for 'a:b:c'

2017-12-14 07:36:45,901: [main] DEBUG Pso.getPSO(222) -  - Pso 'groupMembership' - Get pso for 'a:b:c'

2017-12-14 07:36:45,901: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipGroupDn' - Source attribute 'changeLogMembershipGroupDn' does not exist

2017-12-14 07:36:45,901: [main] DEBUG Pso.getPSO(229) -  - Pso 'groupMembership' - Unable to calculate pso identifier for 'a:b:c'

2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(222) -  - Pso 'memberMembership' - Get pso for 'a:b:c'

2017-12-14 07:36:45,902: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipMemberDn' - Source attribute 'changeLogMembershipMemberDn' does not exist

2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(229) -  - Pso 'memberMembership' - Unable to calculate pso identifier for 'a:b:c'

2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(222) -  - Pso 'groupMemberMembership' - Get pso for 'a:b:c'

2017-12-14 07:36:45,902: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipGroupMemberDn' - Source attribute 'changeLogMembershipGroupMemberDn' does not exist

2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(229) -  - Pso 'groupMemberMembership' - Unable to calculate pso identifier for 'a:b:c'

2017-12-14 07:36:45,903: [main] ERROR Psp.execute(1015) -  - Psp 'psp' - Calc CalcResponse[id=a:b:c,status=failure,error=noSuchIdentifier,errorMessages={Unable to calculate provisioned object.},requestID=2017/12/14-07:36:45.821]

2017-12-14 07:36:45,903: [main] ERROR Psp.execute(1017) -  - Psp 'psp' - Calc XML:

<psp:calcResponse xmlns:psp='http://grouper.internet2.edu/psp' status='failure' requestID='2017/12/14-07:36:45.821' error='noSuchIdentifier'>

  <errorMessage>Unable to calculate provisioned object.</errorMessage>

  <psp:id ID='a:b:c'/>

</psp:calcResponse>

2017-12-14 07:36:45,904: [main] ERROR Psp.execute(1175) -  - Psp 'psp' - Diff DiffResponse[id=a:b:c,status=failure,error=noSuchIdentifier,errorMessages={Unable to calculate provisioned object.},requestID=2017/12/14-07:36:45.820]

2017-12-14 07:36:45,905: [main] ERROR Psp.execute(1177) -  - Psp 'psp' - Diff XML:

<psp:diffResponse xmlns:psp='http://grouper.internet2.edu/psp' status='failure' requestID='2017/12/14-07:36:45.820' error='noSuchIdentifier'>

  <errorMessage>Unable to calculate provisioned object.</errorMessage>

  <psp:id ID='a:b:c'/>

</psp:diffResponse>

2017-12-14 07:36:45,905: [main] ERROR Psp.execute(1440) -  - Psp 'psp' - Sync SyncResponse[id=a:b:c,status=failure,error=noSuchIdentifier,errorMessages={Unable to calculate provisioned object.},requestID=2017/12/14-07:36:45.820]

2017-12-14 07:36:45,905: [main] ERROR Psp.execute(1442) -  - Psp 'psp' - Sync SPML:

<psp:syncResponse xmlns:psp='http://grouper.internet2.edu/psp' status='failure' requestID='2017/12/14-07:36:45.820' error='noSuchIdentifier'>

  <errorMessage>Unable to calculate provisioned object.</errorMessage>

  <psp:id ID='a:b:c'/>

</psp:syncResponse>

2017-12-14 07:36:45,906: [main] INFO  PspCLI.run(146) -  - End of psp execution : 93 ms

Best,

---
Satya Mohapatra, ସତ୍ୟ ମହାପାତ୍ର, सत्य महापात्र,  ستیا موہپترا

LIGO laboratory @ MIT

Attachment: signature.asc
Description: Message signed with OpenPGP