Grouper Users - Open Discussion List

["Coleman, Erik C" <>]

Indeed I did, that SQL query returned one row—my personal subject, which was put in the wheelhouse group and when I started up Grouper before I had changed the subject sources, it obviously recorded the old subject source.  

 

Turns out we were going to rebuild the database anyway with a new test iteration, so understanding and having the order right this time—define subject sources *before* any memberships are made—fixed the problem.

 

Thanks for pointing me in the right direction!

 

-Erik

 

 

From: Hyzer, Chris <>
Sent: Thursday, May 31, 2018 8:45 AM
To: Coleman, Erik C <>;
Subject: RE: Confusion with Multiple Subject Sources

 

Did you used to have a source “ldap” and you don’t anymore?  J

 

Run this query:

 

select * from grouper_members gm where GM.SUBJECT_SOURCE = 'ldap'

 

Assuming you have results…

 

You might need to temporarily add a subject source named “ldap” while you clean this up…

 

You need to see which records have “ldap”

 

1. If those users aren’t in grouper_members in another source, you can simply edit those records to have the right SUBJECT_ID and SUBJECT_SOURCE
2. More likely, they already have a record in another existing source, in which case you need to do a “member change subject”

 

https://spaces.internet2.edu/pages/viewpage.action?pageId=14517859#GrouperShell(gsh)-Memberchangesubject

 

We should put that utility on the UI at some point…

 

Thanks

Chris

 

 

 

From: [] On Behalf Of Coleman, Erik C
Sent: Thursday, May 31, 2018 1:05 AM
To:
Subject: [grouper-users] Confusion with Multiple Subject Sources

 

Hello,

 

Our currently planned design has two subject sources defined in subject.properties, both from the same LDAP:

 

1. uofipeople – basically has a search base of the OU=People, aka the “system users”
2. uofiurbsvc – Has a search base for a different OU containing department OUs, thus all the custom guest and service accounts.

 

This provides us some convenience in distinguishing sources and having slightly different configs. All seems to be defined OK, there are two stanzas, each with the id defined appropriately. I can search and find subjects in both and add them as members to groups.

 

But for some reason, when I add a group to another group in the New UI, I get a strange errors when I perform a function on the group in multiple ways:

 

Error: Cant find source with id: 'ldap', Possible source id's: 'g:isa', 'uofinetid', 'g:gsa', 'grouperEntities', 'uofiurbsvc', 'grouperExternal', , Problem calling method groupPrivileges on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Group

 

Error: Cant find source with id: 'ldap', Possible source id's: 'g:isa', 'uofinetid', 'g:gsa', 'grouperEntities', 'uofiurbsvc', 'grouperExternal', , Problem calling method viewGroup on edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Group

 

The strange part is I don’t have a subject source defined with an ID of “ldap”, as the error implies, the list of possible source ID’s are the only ones I’ve got defined. So where is it referencing this “ldap” as the source for group name resolution? Why wouldn’t it want to use the Grouper Internal source?

 

Thanks for any tips!

 

-Erik Coleman

University of Illinois at Urbana-Champaign