Grouper Users - Open Discussion List

[Shaun Koh <>]

Hi Grouper team,

 

Just noting I’ve raised a very similar (if not identical) issue a month ago and still inclined to know if and when a solution can be provided:

 

https://lists.internet2.edu/sympa/arc/grouper-users/2018-06/msg00093.html

 

…also dug up a post from last year that seem to be the first reporting of this issue:

 

https://lists.internet2.edu/sympa/arc/grouper-users/2017-11/msg00056.html

 

This is currently a blocker for our Grouper to Active Directory provisioning service should an unmanaged event occur (e.g. an uninformed LDAP service operator creating / adding members to a group directly in AD).

 

We intend to modify the relevant PSPNG code to resolve this (and a few other issues) however would prefer to avoid forking if possible.

 

Looking forward to a response.

 

Regards,

Shaun Koh

 

From: <> On Behalf Of Ryan Rumbaugh
Sent: Tuesday, 17 July 2018 10:09 AM
To:
Subject: [FORGED] [grouper-users] pspng LDAP NameAlreadyBoundException

 

Hi all,

 

We are using the latest TIER Grouper, 2.3.0-a107-u44-w12-p16, and have been working getting multiple directory provisioners working using pspng. When everything was configured correctly, or so I thought, I noticed the exception in the logs copied below.

 

The group referenced in the exception is getting populated and updates are working, but I was curious if anyone had some insight as to why this occurring? Having searched the archives it doesn’t appear to me related to past posts -- we are not using special characters and our single group search is not using dn.

 

 

grouper-api;grouper_error.log;;;2018-07-16 21:45:00,885: [DefaultQuartzScheduler_Worker-7] ERROR GrouperLoaderJob.runJob(485) -  - Error on job: CHANGE_LOG_consumer_pspng_ad_nebraska

java.lang.RuntimeException: Error in loader job: null, check logs: Summary: 997 successes/1 failures.  (997 successful entries will be retried because they follow a failure in the queue.) First error was: Modification failed: LDAP Provisioning failed: javax.naming.NameAlreadyBoundException: [LDAP: error code 68 - 00000562: UpdErr: DSID-031A11E2, problem 6005 (ENTRY_EXISTS), data 0

]; remaining name 'cn=test:pleasecreatethis,ou=grouper,dc=neadtest,dc=nebraska,dc=edu'Did not get all the way through the batch! -1 != 19991462

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:474)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:345)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

 

 

Thanks!

 

--

Ryan Rumbaugh

Identity Management Specialist

Cybersecurity & Identity |ITS|

501 123.1, 68588-0203

University of Nebraska |nebraska.edu

Kearney|Lincoln|Omaha

402-472-0831 (o)