Grouper Users - Open Discussion List

[Andrew Morgan <>]

If I understand this right, my grouper daemon is v2.3 patch 80, but my ui 
frontends are running api v2.3 patch 39 and ui v2.3 patch 32.

I haven't touched our Grouper stuff in a while...  :)

Thanks,
        Andy

On Tue, 24 Jul 2018, Hyzer, Chris wrote:

> What version of grouper do you use and what patch levels?  We can fix this 
> pretty easily if you like... as a workaround you can adjust those database 
> fields if you like...
>
>
> -----Original Message-----
> From: Andrew Morgan 
> [mailto:]
> Sent: Tuesday, July 24, 2018 2:50 PM
> To: Hyzer, Chris 
> <>
> Cc: 
>
> Subject: RE: [grouper-users] Error: "Cant find creator of ..."
>
> Aha, the error message was misleading!  Here is more of the stack trace:
>
> 2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu : 
> org : is : app : box : temp eligible
> edu.internet2.middleware.subject.SubjectNotFoundException: No results: 
> searchSubject filter:(uid=%TERM%) searchValue: hagimotk
>         at 
> edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapUnique(LdapSourceAdapter.java:811)
>         at 
> edu.internet2.middleware.subject.provider.LdapSourceAdapter.getSubject(LdapSourceAdapter.java:375)
>         at 
> edu.internet2.middleware.grouper.subj.SourcesXmlResolver.find(SourcesXmlResolver.java:309)
>         at 
> edu.internet2.middleware.grouper.subj.CachingResolver.find(CachingResolver.java:143)
>         at 
> edu.internet2.middleware.grouper.subj.ValidatingResolver.find(ValidatingResolver.java:105)
>         at 
> edu.internet2.middleware.grouper.SubjectFinder.findByIdAndSource(SubjectFinder.java:504)
>         at 
> edu.internet2.middleware.grouper.Group.getModifySubject(Group.java:3690)
>         at 
> edu.internet2.middleware.grouper.grouperUi.beans.api.GuiObjectBase.getLastUpdatedByGuiSubject(GuiObjectBase.java:196)
> ...
>
> So it was actually failing to resolve the subject that last modified the
> group.  Digging in with SQL shows:
>
>
> SQL> select name, creator_id, MODIFIER_ID from grouper_groups where id = 
> 'd32649c748ec4cb19e489b0ab5656f8f';
>
> NAME
> ----------------------------------------------------------------------------------------------------------------------------------
> CREATOR_ID                               MODIFIER_ID
> ---------------------------------------- 
> ----------------------------------------
> osu:org:is:app:box:temp-eligible
> 02c44e5a77fb4dbf81ce38515e9deed7         d8adf0aa82df489a9c3fe011d8734081
>
> SQL> select subject_id from grouper_members where id = 
> '02c44e5a77fb4dbf81ce38515e9deed7';
>
> SUBJECT_ID
> ----------------------------------------------------------------------------------------------------------------------------------
> lomaxe
>
> SQL> select subject_id from grouper_members where id = 
> 'd8adf0aa82df489a9c3fe011d8734081';
>
> SUBJECT_ID
> ----------------------------------------------------------------------------------------------------------------------------------
> hagimotk
>
>
> I understand now why I'm seeing this error.  As one of our former Grouper
> admins, hagimotk will be the modifier for many groups.
>
> What are the options for dealing with this?  Find all occurrences and
> "fix" them?  Stop removing subjects from the subject source?  :)
>
> It would be nice if the error message did not mislead me by using
> "creator" in its wording.
>
> Thanks,
>         Andy
>
> On Tue, 24 Jul 2018, Hyzer, Chris wrote:
>
> > Can you select the row from grouper_groups and see if the auditing member ids 
> > (creator_id, modifier_id) are still the old user (they should still have a 
> > row in grouper_members by
> > "id").  If you want to open a bug with that info we can fix that for you
> >
> > Thanks
> > Chris
> >
> > -----Original Message-----
> > From: 
> >
> >  
> > [mailto:]
> >  On Behalf Of Andrew Morgan
> > Sent: Monday, July 23, 2018 2:28 PM
> > To: 
> >
> > Subject: [grouper-users] Error: "Cant find creator of ..."
> >
> > One of our Grouper admins left the university a while ago, and we recently
> > deleted her account from LDAP as part of our account lifecycle.  We
> > removed her Grouper memberships, but she had direct privileges on a few
> > groups.  I ran the USDU to remove those as well.
> >
> > Even after running USDU, I'm seeing this curious error message in the UI
> > log when I view the Members or Privileges tab of specific group:
> >
> > 2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu : 
> > org : is : app : box : temp eligible
> > edu.internet2.middleware.subject.SubjectNotFoundException: No results: 
> > searchSubject filter:(uid=%TERM%) searchValue: <username-redacted>
> >
> >
> > However, when I view "More" in the UI for the group, it says:
> >
> > Creator:        Lomax, Erica (lomaxe)
> >
> >
> > (lomaxe is still a valid account, not the person that left).
> >
> > Where is the "creator" in the error message coming from?
> >
> > Thanks,
> > Andy Morgan
> > Systems Administrator, Identity & Access Management
> > Information Services | Oregon State University