Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] PSP error - works fine with member but not with group object

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] PSP error - works fine with member but not with group object


Chronological Thread 
  • From: Satya Mohapatra <>
  • To: "" <>
  • Subject: Re: [grouper-users] PSP error - works fine with member but not with group object
  • Date: Fri, 15 Dec 2017 15:50:57 +0000
  • Accept-language: en-US
  • Ironport-phdr: 9a23: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

FYI - I figured it out.  It was a bad configuration on my part which was mixing up baseDn and baseStem while not properly sourcing from ldap.properties from source.xml. 

So please ignore my earlier mail below. 

Thanks, 
---
Satya Mohapatra, ସତ୍ୟ ମହାପାତ୍ର, सत्य महापात्र,  ستیا موہپترا
LIGO laboratory @ MIT

On Dec 14, 2017, at 10:44 AM, Satya Mohapatra <> wrote:

Hi,

Any help with the following will be greatly appreciated. 

This is regarding system which is running grouper version 2.1.5.

With ./gsh.sh -psp -sync  any -entityName member calc/sync is working fine and correct group membership is calculated and synced with the target ldap. 

When I do the same for a group object 

i.e.  ./gsh.sh -psp -sync a:b:c -entityName group 

it is unable to calculate that object. 

  * The target is an openldap server with bushy structure. 

  * ldap.properties has the following set up. 
edu.internet2.middleware.psp.groupObjectClass=groupOfNames
edu.internet2.middleware.psp.groupsBaseDn=ou=grouper,dc=ligo,dc=org
edu.internet2.middleware.psp.peopleBaseDn=ou=people,dc=ligo,dc=org                                      
edu.internet2.middleware.psp.cnSourceAttributeID=extension



Debug message below:
-------------------
2017-12-14 07:36:45,820: [main] INFO  Psp.execute(1140) -  - Psp 'psp' - Diff DiffRequest[id=a:b:c,requestID=2017/12/14-07:36:45.820,returnData=everything]
2017-12-14 07:36:45,821: [main] INFO  Psp.execute(1144) -  - Psp 'psp' - Diff XML:
  <psp:id ID='a:b:c'/>
</psp:diffRequest>

2017-12-14 07:36:45,821: [main] INFO  Psp.execute(980) -  - Psp 'psp' - Calc CalcRequest[id=a:b:c,requestID=2017/12/14-07:36:45.821,returnData=everything]
2017-12-14 07:36:45,822: [main] INFO  Psp.execute(984) -  - Psp 'psp' - Calc XML:
  <psp:id ID='a:b:c'/>
</psp:calcRequest>

2017-12-14 07:36:45,824: [main] DEBUG Psp.execute(1069) -  - PSP 'psp' - Calc CalcRequest[id=a:b:c,requestID=2017/12/14-07:36:45.821,returnData=everything] Resolving attributes '[stemDn, stemDnAlternateChangeLog, stemObjectclass, stemOu, stemDescription, stemSeeAlso, groupDn, groupDnAlternate, groupDnAlternateChangeLog, groupObjectclass, cn, groupDescription, hasMember, groupIsMemberOf, mailLocalAddress, membersLdap, membersGsa, members-jdbc, memberDn, memberObjectclass, memberIsMemberOf, changeLogMembershipGroupDn, changeLogMembershipSubjectName, changeLogMembershipLdapSubjectId, changeLogMembershipGroupSubjectName, changeLogMembershipMemberDn, changeLogMembershipGroupName, changeLogMembershipGroupMemberDn]'.
2017-12-14 07:36:45,824: [main] DEBUG SimpleAttributeAuthority.getAttributes(86) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority'
2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'DeleteStemChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'DeleteStemChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateStemNameChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,829: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateStemNameChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,830: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateStemDescriptionChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,830: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateStemDescriptionChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,830: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'StemAttributeAssignValueChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,831: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'StemAttributeAssignValueChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,831: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'stemDn' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,831: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'stemDn' - Resolve principal 'a:b:c' No dependencies
2017-12-14 07:36:45,832: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'stemDnAlternateChangeLog' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,832: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'stemDnAlternateChangeLog' - Resolve principal 'a:b:c' No dependencies
2017-12-14 07:36:45,854: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'DeleteGroupChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,854: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'DeleteGroupChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,854: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateGroupNameChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateGroupNameChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'UpdateGroupDescriptionChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'UpdateGroupDescriptionChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,855: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'GroupAttributeAssignValueChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,856: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'GroupAttributeAssignValueChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,856: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'groupDn' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,856: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'groupDn' - Resolve principal 'a:b:c' No dependencies
2017-12-14 07:36:45,856: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'groupDnAlternate' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,857: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'groupDnAlternate' - Resolve principal 'a:b:c' No dependencies
2017-12-14 07:36:45,857: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'groupDnAlternateChangeLog' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,857: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'groupDnAlternateChangeLog' - Resolve principal 'a:b:c' No dependencies
2017-12-14 07:36:45,872: [main] DEBUG LdapSourceAdapter.getLdapResultsHelper(670) -  - searchType: searchSubject, filter: (& (krbPrincipalName=a:b:c)(objectclass=inetOrgPerson))
2017-12-14 07:36:45,874: [main] DEBUG PsoIdentifierAttributeDefinition.doResolve(50) -  - PSOIdentifier attribute definition 'memberDn' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,875: [main] DEBUG LdapSourceAdapter.getLdapResultsHelper(670) -  - searchType: searchSubject, filter: (& (krbPrincipalName=a:b:c)(objectclass=inetOrgPerson))
2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'AddMembershipChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'AddMembershipChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(68) -  - ChangeLog data connector 'DeleteMembershipChangeLogDataConnector' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,877: [main] DEBUG ChangeLogDataConnector.resolve(81) -  - ChangeLog data connector 'DeleteMembershipChangeLogDataConnector' - Principal name 'a:b:c' does not match prefix
2017-12-14 07:36:45,878: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupDn' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,878: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupDn' - Resolve principal 'a:b:c' No dependencies
2017-12-14 07:36:45,897: [main] DEBUG PsoIdentifierAttributeDefinition.doResolve(50) -  - PSOIdentifier attribute definition 'changeLogMembershipMemberDn' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,897: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(189) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupMemberDn' - Resolve principal 'a:b:c'
2017-12-14 07:36:45,898: [main] DEBUG LdapDnFromGrouperNamePSOIdentifierAttributeDefinition.doResolve(197) -  - Ldap dn from grouper name attribute definition 'changeLogMembershipGroupMemberDn' - Resolve principal 'a:b:c' No dependencies
2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'groupObjectclass' : top
2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'groupObjectclass' : groupOfNames
2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'groupObjectclass' : eduMember
2017-12-14 07:36:45,898: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'memberObjectclass' : eduMember
2017-12-14 07:36:45,899: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'stemObjectclass' : top
2017-12-14 07:36:45,899: [main] DEBUG SimpleAttributeAuthority.getAttributes(106) -  - get attributes 'a:b:c' aa 'psp.AttributeAuthority' returned 'stemObjectclass' : organizationalUnit
2017-12-14 07:36:45,899: [main] DEBUG Psp.execute(1072) -  - PSP 'psp' - Calc CalcRequest[id=a:b:c,requestID=2017/12/14-07:36:45.821,returnData=everything] Resolved attributes '[groupObjectclass, memberObjectclass, stemObjectclass]'.
2017-12-14 07:36:45,899: [main] DEBUG Pso.getPSO(222) -  - Pso 'stem' - Get pso for 'a:b:c'
2017-12-14 07:36:45,899: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'stemDn' - Source attribute 'stemDn' does not exist
2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(229) -  - Pso 'stem' - Unable to calculate pso identifier for 'a:b:c'
2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(222) -  - Pso 'group' - Get pso for 'a:b:c'
2017-12-14 07:36:45,900: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'groupDn' - Source attribute 'groupDn' does not exist
2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(229) -  - Pso 'group' - Unable to calculate pso identifier for 'a:b:c'
2017-12-14 07:36:45,900: [main] DEBUG Pso.getPSO(222) -  - Pso 'member' - Get pso for 'a:b:c'
2017-12-14 07:36:45,901: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'memberDn' - Source attribute 'memberDn' does not exist
2017-12-14 07:36:45,901: [main] DEBUG Pso.getPSO(229) -  - Pso 'member' - Unable to calculate pso identifier for 'a:b:c'
2017-12-14 07:36:45,901: [main] DEBUG Pso.getPSO(222) -  - Pso 'groupMembership' - Get pso for 'a:b:c'
2017-12-14 07:36:45,901: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipGroupDn' - Source attribute 'changeLogMembershipGroupDn' does not exist
2017-12-14 07:36:45,901: [main] DEBUG Pso.getPSO(229) -  - Pso 'groupMembership' - Unable to calculate pso identifier for 'a:b:c'
2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(222) -  - Pso 'memberMembership' - Get pso for 'a:b:c'
2017-12-14 07:36:45,902: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipMemberDn' - Source attribute 'changeLogMembershipMemberDn' does not exist
2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(229) -  - Pso 'memberMembership' - Unable to calculate pso identifier for 'a:b:c'
2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(222) -  - Pso 'groupMemberMembership' - Get pso for 'a:b:c'
2017-12-14 07:36:45,902: [main] DEBUG PsoIdentifier.getPSOIdentifier(86) -  - PSO Identifier Definition 'changeLogMembershipGroupMemberDn' - Source attribute 'changeLogMembershipGroupMemberDn' does not exist
2017-12-14 07:36:45,902: [main] DEBUG Pso.getPSO(229) -  - Pso 'groupMemberMembership' - Unable to calculate pso identifier for 'a:b:c'
2017-12-14 07:36:45,903: [main] ERROR Psp.execute(1015) -  - Psp 'psp' - Calc CalcResponse[id=a:b:c,status=failure,error=noSuchIdentifier,errorMessages={Unable to calculate provisioned object.},requestID=2017/12/14-07:36:45.821]
2017-12-14 07:36:45,903: [main] ERROR Psp.execute(1017) -  - Psp 'psp' - Calc XML:
  <errorMessage>Unable to calculate provisioned object.</errorMessage>
  <psp:id ID='a:b:c'/>
</psp:calcResponse>

2017-12-14 07:36:45,904: [main] ERROR Psp.execute(1175) -  - Psp 'psp' - Diff DiffResponse[id=a:b:c,status=failure,error=noSuchIdentifier,errorMessages={Unable to calculate provisioned object.},requestID=2017/12/14-07:36:45.820]
2017-12-14 07:36:45,905: [main] ERROR Psp.execute(1177) -  - Psp 'psp' - Diff XML:
  <errorMessage>Unable to calculate provisioned object.</errorMessage>
  <psp:id ID='a:b:c'/>
</psp:diffResponse>

2017-12-14 07:36:45,905: [main] ERROR Psp.execute(1440) -  - Psp 'psp' - Sync SyncResponse[id=a:b:c,status=failure,error=noSuchIdentifier,errorMessages={Unable to calculate provisioned object.},requestID=2017/12/14-07:36:45.820]
2017-12-14 07:36:45,905: [main] ERROR Psp.execute(1442) -  - Psp 'psp' - Sync SPML:
  <errorMessage>Unable to calculate provisioned object.</errorMessage>
  <psp:id ID='a:b:c'/>
</psp:syncResponse>

2017-12-14 07:36:45,906: [main] INFO  PspCLI.run(146) -  - End of psp execution : 93 ms

Best,

---
Satya Mohapatra, ସତ୍ୟ ମହାପାତ୍ର, सत्य महापात्र,  ستیا موہپترا
LIGO laboratory @ MIT


Attachment: signature.asc
Description: Message signed with OpenPGP




Archive powered by MHonArc 2.6.19.

Top of Page