Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

What version of grouper do you use and what patch levels?  We can fix this 
pretty easily if you like... as a workaround you can adjust those database 
fields if you like...


-----Original Message-----
From: Andrew Morgan 
[mailto:]
 
Sent: Tuesday, July 24, 2018 2:50 PM
To: Hyzer, Chris 
<>
Cc: 

Subject: RE: [grouper-users] Error: "Cant find creator of ..."

Aha, the error message was misleading!  Here is more of the stack trace:

2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu : 
org : is : app : box : temp eligible
edu.internet2.middleware.subject.SubjectNotFoundException: No results: 
searchSubject filter:(uid=%TERM%) searchValue: hagimotk
         at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapUnique(LdapSourceAdapter.java:811)
         at 
edu.internet2.middleware.subject.provider.LdapSourceAdapter.getSubject(LdapSourceAdapter.java:375)
         at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.find(SourcesXmlResolver.java:309)
         at 
edu.internet2.middleware.grouper.subj.CachingResolver.find(CachingResolver.java:143)
         at 
edu.internet2.middleware.grouper.subj.ValidatingResolver.find(ValidatingResolver.java:105)
         at 
edu.internet2.middleware.grouper.SubjectFinder.findByIdAndSource(SubjectFinder.java:504)
         at 
edu.internet2.middleware.grouper.Group.getModifySubject(Group.java:3690)
         at 
edu.internet2.middleware.grouper.grouperUi.beans.api.GuiObjectBase.getLastUpdatedByGuiSubject(GuiObjectBase.java:196)
...

So it was actually failing to resolve the subject that last modified the 
group.  Digging in with SQL shows:


SQL> select name, creator_id, MODIFIER_ID from grouper_groups where id = 
'd32649c748ec4cb19e489b0ab5656f8f';

NAME
----------------------------------------------------------------------------------------------------------------------------------
CREATOR_ID                               MODIFIER_ID
---------------------------------------- 
----------------------------------------
osu:org:is:app:box:temp-eligible
02c44e5a77fb4dbf81ce38515e9deed7         d8adf0aa82df489a9c3fe011d8734081

SQL> select subject_id from grouper_members where id = 
'02c44e5a77fb4dbf81ce38515e9deed7';

SUBJECT_ID
----------------------------------------------------------------------------------------------------------------------------------
lomaxe

SQL> select subject_id from grouper_members where id = 
'd8adf0aa82df489a9c3fe011d8734081';

SUBJECT_ID
----------------------------------------------------------------------------------------------------------------------------------
hagimotk


I understand now why I'm seeing this error.  As one of our former Grouper 
admins, hagimotk will be the modifier for many groups.

What are the options for dealing with this?  Find all occurrences and 
"fix" them?  Stop removing subjects from the subject source?  :)

It would be nice if the error message did not mislead me by using 
"creator" in its wording.

Thanks,
        Andy

On Tue, 24 Jul 2018, Hyzer, Chris wrote:

> Can you select the row from grouper_groups and see if the auditing member 
> ids (creator_id, modifier_id) are still the old user (they should still 
> have a row in grouper_members by
> "id").  If you want to open a bug with that info we can fix that for you
>
> Thanks
> Chris
>
> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Andrew Morgan
> Sent: Monday, July 23, 2018 2:28 PM
> To: 
> 
> Subject: [grouper-users] Error: "Cant find creator of ..."
>
> One of our Grouper admins left the university a while ago, and we recently
> deleted her account from LDAP as part of our account lifecycle.  We
> removed her Grouper memberships, but she had direct privileges on a few
> groups.  I ran the USDU to remove those as well.
>
> Even after running USDU, I'm seeing this curious error message in the UI
> log when I view the Members or Privileges tab of specific group:
>
> 2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu 
> : org : is : app : box : temp eligible
> edu.internet2.middleware.subject.SubjectNotFoundException: No results: 
> searchSubject filter:(uid=%TERM%) searchValue: <username-redacted>
>
>
> However, when I view "More" in the UI for the group, it says:
>
> Creator:      Lomax, Erica (lomaxe)
>
>
> (lomaxe is still a valid account, not the person that left).
>
> Where is the "creator" in the error message coming from?
>
> Thanks,
> Andy Morgan
> Systems Administrator, Identity & Access Management
> Information Services | Oregon State University
>