grouper-users - [grouper-users] PSPNG - Provisioning random groups?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] PSPNG - Provisioning random groups?

From: Ryan Rumbaugh <>
To: "" <>
Subject: [grouper-users] PSPNG - Provisioning random groups?
Date: Fri, 7 Sep 2018 17:43:16 +0000
Accept-language: en-US
Ironport-phdr: 9a23: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
Spamdiagnosticmetadata: NSPM
Spamdiagnosticoutput: 1:99

Hi all,

Curious if anyone else has seen PSPNG provision groups that do not have the provision_to attribute assigned? We’re seeing happen quite a bit on loader groups for some odd reason. This is on Grouper 2.3 with PSPNG patch 20 applied. I don’t notice any particular rhyme or reason why it is attempting to provision just some of the loader groups, but not all. Any ideas? Thanks.

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:14,393: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR LdapGroupProvisioner.createGroup(394) - - Problem while creating new group: dn: cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at java.lang.Thread.run(Thread.java:748)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:201)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:290)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.fullSyncGroup(FullSyncProvisioner.java:661)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1377)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:39)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:179)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:383)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:731)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.ensureLdapOusExist(LdapProvisioner.java:622)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at com.unboundid.ldap.sdk.DN.<init>(DN.java:283)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at com.unboundid.ldap.sdk.DN.<init>(DN.java:380)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: LDAPException(resultCode=34 (invalid DN syntax), errorMessage='The provided string could not be decoded as a DN because no equal sign was found after the RDN attribute 'NE'.')

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:14,393: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR LdapProvisioner.ensureLdapOusExist(630) - - Problem parsing DN cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools,OU=Grouper-ES,DC=unl,DC=edu

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at java.lang.Thread.run(Thread.java:748)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:201)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:290)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.fullSyncGroup(FullSyncProvisioner.java:661)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1377)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:39)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:179)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:383)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:731)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.ensureLdapOusExist(LdapProvisioner.java:631)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: edu.internet2.middleware.grouper.pspng.PspException: Problem parsing DN: cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools,OU=Grouper-ES,DC=unl,DC=edu

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:13,292: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR FullSyncProvisioner.fullSyncGroup(668) - - FullSyncer(pspng_ad_lincoln): Problem doing full sync. Requeuing group basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools