Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

I don’t think so, can you reproduce it, and run jstack on the process ID a 
couple times, and send along the output?

Thanks
Chris

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Gettes, Michael
Sent: Monday, June 18, 2018 7:53 AM
To: 

Subject: [grouper-users] PSPNG and not provisioning within a provisioned 
folder

Hi All,

I tried to do the following and found excessive CPU by the loader and it 
essentially doesn’t work but I don’t know if this is intentional or not.  I 
can’t seem to find any discussion or documentation indicating either way.  
Provisioner X definition is at the bottom.  Nothing is found in the logs.

I create folder A.  I configure folder A to be provisioned by PSPNG 
provisioner X.
I create folder A:B and groups within it and everything works as expected 
being provisioned by X
I create folder A:C but I do not want it provisioned by X so I assign 
etc:pspng:do_not_provision_to to A:C.

The grouper loader begins to use excessive CPU and appears to no longer 
provision by X but everything else continues to work - albeit a little more 
slowly.

I then remove etc:pspng:do_not_provision_to from folder A:C and restart the 
loader and things go back to normal - but without the ability to exclude A:C 
from provisioner X.

I have not yet turned on debug or anything - just want to determine if this 
is expected behavior or not.

Thank you!

/mrg

P.S.  Running latest TIER grouper package 2.3.0-a106-u43-w12-p16

changeLog.consumer.psp_X.provisionerName = psp_X
changeLog.consumer.psp_X.class = 
edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim
changeLog.consumer.psp_X.type = 
edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner
changeLog.consumer.psp_X.quartzCron = 3/5 * * * * ?
changeLog.consumer.psp_X.retryOnError = true
changeLog.consumer.psp_X.ldapPoolName = demo
changeLog.consumer.psp_X.isActiveDirectory = false
changeLog.consumer.psp_X.memberAttributeName = member
changeLog.consumer.psp_X.memberAttributeValueFormat = ${ldapUser.getDn()}
changeLog.consumer.psp_X.grouperIsAuthoritative = true
changeLog.consumer.psp_X.groupSearchBaseDn = ou=groups,dc=internet2,dc=edu
changeLog.consumer.psp_X.groupCreationBaseDn = ou=groups,dc=internet2,dc=edu
changeLog.consumer.psp_X.allGroupsSearchFilter = objectclass=groupOfNames
changeLog.consumer.psp_X.singleGroupSearchFilter = 
(&(objectclass=groupOfNames)(cn=${group.name}))
changeLog.consumer.psp_X.groupSearchAttributes = 
cn,gidNumber,objectclass,member
changeLog.consumer.psp_X.groupCreationLdifTemplate = dn: 
cn=${group.name}||cn: ${group.name}||objectclass: top||objectclass: 
groupOfNames||objectclass: posixGroup||gidNumber: ${group.idIndex}
changeLog.consumer.psp_X.userSearchBaseDn = dc=internet2,dc=edu
changeLog.consumer.psp_X.userSearchFilter = 
(&(objectclass=inetOrgPerson)(uid=${subject.id}))
changeLog.consumer.psp_X.userCreationBaseDn = ou=People,dc=internet2,dc=edu
changeLog.consumer.psp_X.createMissingUsers = true
changeLog.consumer.psp_X.userCreationLdifTemplate = dn: 
uid=${subject.id}||uid: ${subject.id}||objectclass: top||objectclass: 
person||objectclass: organizationalPerson||objectclass: inetOrgPerson||sn: 
${subject.id}||cn: ${subject.id}
changeLog.consumer.psp_X.userSearchAttributes = 
dn,cn,uid,mail,uidNumber,objectclass