Skip to Content.
Sympa Menu

grouper-users - [grouper-users] RE: PSPNG issues

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: PSPNG issues

Chronological Thread 
  • From: Dave Churchley <>
  • To: "Bee-Lindgren, Bert" <>, Grouper-Users <>
  • Subject: [grouper-users] RE: PSPNG issues
  • Date: Wed, 21 Mar 2018 15:45:29 +0000
  • Accept-language: en-GB, en-US
  • Authentication-results:; spf=pass
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Hi Bert


Just wanted to give this a bump to see if there was anything you could suggest we try? Or do we have to wait for a resolution to




From: Dave Churchley
Sent: 02 March 2018 13:15
To: 'Bee-Lindgren, Bert' <>; Grouper-Users <>
Subject: RE: PSPNG issues


Hi Bert


We’ve recently started looking at PSPNG again. I have a fully patched Grouper 2.3.0 but we’re still experiencing provisioning errors when a group name has special characters in it. I’m assuming I’ve got a configuration error in my groupCreationLdifTemplate but I’ve tried all sorts of different combinations and haven’t been able to get it to work yet.


I haven’t been able to find any definitive documentation. Is it possible to update the info at Or is there somewhere else I should be looking?


For info, this is where we’ve got to so far:


changeLog.consumer.pspng_activedirectory.groupCreationLdifTemplate = dn: ${utils.bushyDn(,"cn","ou")}||cn: ${grouperUtil.extensionFromName(name)}||objectclass: group||samaccountname: ${grouperUtil.extensionFromName(name)}||description: ${group.description} ${grouperUtil.extensionFromName(name)}


Any suggestions would be more than welcome!


I’ve just spotted that has been reopened. Is it actually the case that there isn’t a solution to this yet?






From: [] On Behalf Of Bee-Lindgren, Bert
Sent: 02 August 2017 00:31
To: Dave Churchley <>; Grouper-Users <>
Subject: [grouper-users] Re: PSPNG issues




PSPNG 2.3 Patch 14 now makes sure that the escaping sticks all the way through the expressions and into LDAP; there was a gap in that process as Patch 13 implemented it.


In response to several of your other problems, my next task is to (as quickly as possible) address the updates that do not get propagated to LDAP groups name/description (GRP-1345) and DN (GRP-1346).



  Bert Bee-Lindgren


From: Bee-Lindgren, Bert
Sent: Wednesday, July 26, 2017 11:40 AM
To: Dave Churchley; Grouper-Users
Subject: Re: PSPNG issues


bushyDn should already do all the escaping that is necessary. It was tested with OU commas and escapleLdapRdn was tested with group-name commas, but I'm duplicating and patching the problem with bushyDn and group-name commas/pluses. 


From: <> on behalf of Dave Churchley <>
Sent: Tuesday, July 25, 2017 12:13 PM
To: Grouper-Users
Subject: [grouper-users] RE: PSPNG issues


Good afternoon

I see that Bert has released a patch for issue

I've installed the patch but I'm still seeing the same issue (with  + and , for example).

I suspect that I need to do something with utils.escapeLdapRdn(string) in I've tried various things but haven't been able to work it out yet. Any advice, please?

I've attached the relevant part of


>-----Original Message-----
>From: [mailto:grouper-users-
>] On Behalf Of Dave Churchley
>Sent: 19 July 2017 14:43
>To: Grouper-Users <>
>Subject: [grouper-users] RE: PSPNG issues
>Just to add to number 1 below, it seems that PSPNG also struggles with plus
>signs, parentheses and spaces in group names. This could be related to
>>-----Original Message-----
>>From: [mailto:grouper-users-
>>] On Behalf Of Dave Churchley
>>Sent: 18 July 2017 16:56
>>To: Grouper-Users <>
>>Subject: [grouper-users] PSPNG issues
>>I'm currently testing PSPNG provisioning to a test AD. So far, I really like what
>>see but I've now run into a couple of snags.
>>1. I get an error when the Grouper group name has multiple consecutive
>>asterisks, eg LIBR_Auto_CEG****. The old PSP service could handle this
>>name. I've attached the an extract from grouper_error.log to show the
>>2. Related to the above, when the full sync can't provision a group, it appears
>>to get stuck and retry ever second. This means that it will never complete. I
>>think it would be preferable to write a nice error and then skip that group.
>>I'm not sure if these are real issues or if I'm doing something wrong, so any
>>advice would be appreciated! Also, is there a gsh command to force PSPNG
>>sync a specific group? Similar to the old PSP?
>>Dave Churchley
>>Newcastle University

Archive powered by MHonArc 2.6.19.

Top of Page