Grouper Users - Open Discussion List

["Gettes, Michael" <>]

Yup - that’s what I thought would happen… now I can’t recreate it.  I’ve been 
trying to recreate for a few hours.

So, move along.  Nothing to see here.  If I trip across it again I will be 
sure to get a jStack (and a few of them).

Sorry to bother.

/mrg

> On Jun 18, 2018, at 8:44 AM, Hyzer, Chris 
> <>
>  wrote:
> 
> I don’t think so, can you reproduce it, and run jstack on the process ID a 
> couple times, and send along the output?
> 
> Thanks
> Chris
> 
> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Gettes, Michael
> Sent: Monday, June 18, 2018 7:53 AM
> To: 
> 
> Subject: [grouper-users] PSPNG and not provisioning within a provisioned 
> folder
> 
> Hi All,
> 
> I tried to do the following and found excessive CPU by the loader and it 
> essentially doesn’t work but I don’t know if this is intentional or not.  I 
> can’t seem to find any discussion or documentation indicating either way.  
> Provisioner X definition is at the bottom.  Nothing is found in the logs.
> 
> I create folder A.  I configure folder A to be provisioned by PSPNG 
> provisioner X.
> I create folder A:B and groups within it and everything works as expected 
> being provisioned by X
> I create folder A:C but I do not want it provisioned by X so I assign 
> etc:pspng:do_not_provision_to to A:C.
> 
> The grouper loader begins to use excessive CPU and appears to no longer 
> provision by X but everything else continues to work - albeit a little more 
> slowly.
> 
> I then remove etc:pspng:do_not_provision_to from folder A:C and restart the 
> loader and things go back to normal - but without the ability to exclude 
> A:C from provisioner X.
> 
> I have not yet turned on debug or anything - just want to determine if this 
> is expected behavior or not.
> 
> Thank you!
> 
> /mrg
> 
> P.S.  Running latest TIER grouper package 2.3.0-a106-u43-w12-p16
> 
> changeLog.consumer.psp_X.provisionerName = psp_X
> changeLog.consumer.psp_X.class = 
> edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim
> changeLog.consumer.psp_X.type = 
> edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner
> changeLog.consumer.psp_X.quartzCron = 3/5 * * * * ?
> changeLog.consumer.psp_X.retryOnError = true
> changeLog.consumer.psp_X.ldapPoolName = demo
> changeLog.consumer.psp_X.isActiveDirectory = false
> changeLog.consumer.psp_X.memberAttributeName = member
> changeLog.consumer.psp_X.memberAttributeValueFormat = ${ldapUser.getDn()}
> changeLog.consumer.psp_X.grouperIsAuthoritative = true
> changeLog.consumer.psp_X.groupSearchBaseDn = ou=groups,dc=internet2,dc=edu
> changeLog.consumer.psp_X.groupCreationBaseDn = ou=groups,dc=internet2,dc=edu
> changeLog.consumer.psp_X.allGroupsSearchFilter = objectclass=groupOfNames
> changeLog.consumer.psp_X.singleGroupSearchFilter = 
> (&(objectclass=groupOfNames)(cn=${group.name}))
> changeLog.consumer.psp_X.groupSearchAttributes = 
> cn,gidNumber,objectclass,member
> changeLog.consumer.psp_X.groupCreationLdifTemplate = dn: 
> cn=${group.name}||cn: ${group.name}||objectclass: top||objectclass: 
> groupOfNames||objectclass: posixGroup||gidNumber: ${group.idIndex}
> changeLog.consumer.psp_X.userSearchBaseDn = dc=internet2,dc=edu
> changeLog.consumer.psp_X.userSearchFilter = 
> (&(objectclass=inetOrgPerson)(uid=${subject.id}))
> changeLog.consumer.psp_X.userCreationBaseDn = ou=People,dc=internet2,dc=edu
> changeLog.consumer.psp_X.createMissingUsers = true
> changeLog.consumer.psp_X.userCreationLdifTemplate = dn: 
> uid=${subject.id}||uid: ${subject.id}||objectclass: top||objectclass: 
> person||objectclass: organizationalPerson||objectclass: inetOrgPerson||sn: 
> ${subject.id}||cn: ${subject.id}
> changeLog.consumer.psp_X.userSearchAttributes = 
> dn,cn,uid,mail,uidNumber,objectclass