grouper-users - [grouper-users] Re: PSPNG - Provisioning random groups?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Re: PSPNG - Provisioning random groups?

From: "Hyzer, Chris" <>
To: Ryan Rumbaugh <>, "" <>
Cc: Bert Bee-Lindgren <>
Subject: [grouper-users] Re: PSPNG - Provisioning random groups?
Date: Fri, 7 Sep 2018 18:39:15 +0000
Accept-language: en-US
Authentication-results: spf=none (sender IP is ) ;
Ironport-phdr: 9a23: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
Spamdiagnosticmetadata: NSPM
Spamdiagnosticoutput: 1:99

Yes I am seeing that too. Bert is looking into it and hopefully we will have a fix soon.

https://bugs.internet2.edu/jira/browse/GRP-1893

In the meantime if you see that patch 20 is what is causing it you should probably revert that patch... wonder if we should remove it temporarily from the download server until we get a fix if the next patch is not there soon...

Thanks

Chris

From: <> on behalf of Ryan Rumbaugh <>
Sent: Friday, September 7, 2018 1:43 PM
To:
Subject: [grouper-users] PSPNG - Provisioning random groups?

Hi all,

Curious if anyone else has seen PSPNG provision groups that do not have the provision_to attribute assigned? We’re seeing happen quite a bit on loader groups for some odd reason. This is on Grouper 2.3 with PSPNG patch 20 applied. I don’t notice any particular rhyme or reason why it is attempting to provision just some of the loader groups, but not all. Any ideas? Thanks.

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:14,393: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR LdapGroupProvisioner.createGroup(394) - - Problem while creating new group: dn: cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at java.lang.Thread.run(Thread.java:748)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:201)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:290)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.fullSyncGroup(FullSyncProvisioner.java:661)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1377)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:39)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:179)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:383)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:731)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.ensureLdapOusExist(LdapProvisioner.java:622)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at com.unboundid.ldap.sdk.DN.<init>(DN.java:283)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at com.unboundid.ldap.sdk.DN.<init>(DN.java:380)

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: LDAPException(resultCode=34 (invalid DN syntax), errorMessage='The provided string could not be decoded as a DN because no equal sign was found after the RDN attribute 'NE'.')

Sep 7 12:30:14 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:14,393: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR LdapProvisioner.ensureLdapOusExist(630) - - Problem parsing DN cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools,OU=Grouper-ES,DC=unl,DC=edu

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at java.lang.Thread.run(Thread.java:748)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:201)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:290)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.fullSyncGroup(FullSyncProvisioner.java:661)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1377)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:39)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:179)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:383)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:731)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.ensureLdapOusExist(LdapProvisioner.java:631)

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: edu.internet2.middleware.grouper.pspng.PspException: Problem parsing DN: cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools,OU=Grouper-ES,DC=unl,DC=edu

Sep 7 12:30:13 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:13,292: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR FullSyncProvisioner.fullSyncGroup(668) - - FullSyncer(pspng_ad_lincoln): Problem doing full sync. Requeuing group basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools