Grouper Users - Open Discussion List

["O'Dowd, Josh" <>]

Thanks Chris,

I don't think the problem is that widespread for us.  This folder and one 
group in particular constituted all of the errors that the exported script 
threw when I ran it with the 2.4.0 api.  We have been using the new 2.4.0 
UI/WS/api platform for almost 3 weeks now and this the only issue we have.

I'll do the data snooping and see about doing some updates to the folder to 
see what we can work out.  Thanks for the guidance.

Josh
________________________________________
From: Hyzer, Chris []
Sent: Tuesday, March 05, 2019 2:34 PM
To: O'Dowd, Josh; Redman, Chad; 
Subject: RE: Pesky Error v2.4.0

First off, impressive that Chad called this being a rule problem.

Ugh, the GSH export doesn’t do rules and attributes well apparently.  Not 
sure how many these are, but if you look in attribute values in the DB, you 
should see that string: '3f70e9c855e244808dda2f7ee3cebef0'

If you want to look in the old DB, see the group name, and go to the new DB, 
get the ID for that name, and replace in the attribute strings, that would 
work 😊  Note you might have more instances of this...

I can make a patch to fix the export at some point and you could try again...

Or you could try to migrate the data using an app that can get the data there 
more consistently...

Let me know how you want to proceed...

Thanks
Chris

-----Original Message-----
From: O'Dowd, Josh <>
Sent: Tuesday, March 05, 2019 4:28 PM
To: Hyzer, Chris <>; Redman, Chad <>; 

Subject: RE: Pesky Error v2.4.0

Thanks Chris, here is what I am seeing when trying to create the group 
"testing" in the problem folder...

2019-03-05 14:20:22,306: [ajp-nio-8009-exec-7] WARN  
UiV2Group.newGroupSubmit(1921) -  - Error creating group: 
'jo180287e'/'person'/'oid', null
edu.internet2.middleware.subject.SubjectNotFoundException: Subject not found: 
'g:gsa': '3f70e9c855e244808dda2f7ee3cebef0',
Problem in HibernateSession: HibernateSession (d6aff47): notNew, notReadonly, 
READ_WRITE_NEW, activeTransaction, session (18a55792),
Problem in HibernateSession: HibernateSession (75b2eaa1): new, notReadonly, 
READ_WRITE_NEW, notActiveTransaction, session (18a55792),
Problem saving group: UMT:IT:WTS:CASCADE_FORM_DATA:testing, thread: 3de0209f
        at 
edu.internet2.middleware.grouper.subj.cache.SubjectSourceCache.getSubjectFromCacheOrSource(SubjectSourceCache.java:1250)
        at 
edu.internet2.middleware.grouper.subj.SourcesXmlResolver.find(SourcesXmlResolver.java:310)
        at 
edu.internet2.middleware.grouper.subj.CachingResolver.find(CachingResolver.java:143)
        at 
edu.internet2.middleware.grouper.subj.ValidatingResolver.find(ValidatingResolver.java:105)
        at 
edu.internet2.middleware.grouper.SubjectFinder.findByIdAndSource(SubjectFinder.java:504)
        at 
edu.internet2.middleware.grouper.SubjectFinder.findByOptionalArgs(SubjectFinder.java:337)
        at 
edu.internet2.middleware.grouper.SubjectFinder.findByPackedSubjectString(SubjectFinder.java:1295)
        at 
edu.internet2.middleware.grouper.rules.RuleThenEnum$10.fireRule(RuleThenEnum.java:769)
        at 
edu.internet2.middleware.grouper.rules.RuleThen.fireRule(RuleThen.java:241)
        at 
edu.internet2.middleware.grouper.rules.RuleEngine$2.callback(RuleEngine.java:461)
        at 
edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:974)
        at 
edu.internet2.middleware.grouper.rules.RuleEngine.fireRule(RuleEngine.java:453)
        at edu.internet2.middleware.grouper.Stem$5.callback(Stem.java:2432)
        at 
edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:701)
        at 
edu.internet2.middleware.grouper.Stem.internal_addChildGroup(Stem.java:2325)
        at 
edu.internet2.middleware.grouper.Stem.internal_addChildGroup(Stem.java:2297)
        at 
edu.internet2.middleware.grouper.Stem.internal_addChildGroup(Stem.java:2279)
        at 
edu.internet2.middleware.grouper.GroupSave$1$1.callback(GroupSave.java:553)
        at 
edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:974)
        at 
edu.internet2.middleware.grouper.GroupSave$1.callback(GroupSave.java:444)
        at 
edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO$1.callback(Hib3TransactionDAO.java:66)
        at 
edu.internet2.middleware.grouper.hibernate.HibernateSession.callbackHibernateSession(HibernateSession.java:701)
        at 
edu.internet2.middleware.grouper.internal.dao.hib3.Hib3TransactionDAO.transactionCallback(Hib3TransactionDAO.java:56)
        at 
edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:87)
        at 
edu.internet2.middleware.grouper.hibernate.GrouperTransaction.callbackGrouperTransaction(GrouperTransaction.java:106)
        at edu.internet2.middleware.grouper.GroupSave.save(GroupSave.java:435)
        at 
edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Group.newGroupSubmit(UiV2Group.java:1902)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at 
edu.internet2.middleware.grouper.util.GrouperUtil.invokeMethod(GrouperUtil.java:4189)
        at 
edu.internet2.middleware.grouper.util.GrouperUtil.callMethod(GrouperUtil.java:4140)
        at 
edu.internet2.middleware.grouper.j2ee.GrouperUiRestServlet.doGet(GrouperUiRestServlet.java:277)
        at 
edu.internet2.middleware.grouper.j2ee.GrouperUiRestServlet.doPost(GrouperUiRestServlet.java:148)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:230)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
        at 
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
        at 
org.owasp.csrfguard.CsrfGuardFilter.doFilter(CsrfGuardFilter.java:88)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
        at 
edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:1127)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
        at 
org.owasp.csrfguard.CsrfGuardFilter.doFilter(CsrfGuardFilter.java:88)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
        at 
edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:1127)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165)
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
        at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:478)
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:80)
        at 
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:624)
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:341)
        at org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:478)
        at 
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
        at 
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:798)
        at 
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1441)
        at 
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
        at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
        at java.lang.Thread.run(Thread.java:748)


________________________________________
From: Hyzer, Chris []
Sent: Tuesday, March 05, 2019 1:55 PM
To: O'Dowd, Josh; Redman, Chad; 
Subject: RE: Pesky Error v2.4.0

Can you please look in the logs and send the full error stack?  Thanks, Chris

-----Original Message-----
From:  
<> On Behalf Of O'Dowd, Josh
Sent: Tuesday, March 05, 2019 3:35 PM
To: Redman, Chad <>; 
Subject: RE: [grouper-users] Pesky Error v2.4.0

Thanks Chad,

I don't think it is a 'group' issue, so much as a 'folder' issue of some 
kind.  The reason I say that is because the folder contains many other groups 
that are behaving normally.  The issue is that I can't create any new groups 
in this folder without getting that error, regardless of what I make the 
group name or group ID.  I have tried a few different names for a new group, 
but I always get the same error, which I provided in my original post.  This 
seems to have something to do with the folder, where there is no longer the 
ability to create new entities in it.  I have SysAdmin privs in the folder, 
but to no avail

Josh

________________________________________
From: Redman, Chad []
Sent: Tuesday, March 05, 2019 1:17 PM
To: O'Dowd, Josh; 
Subject: RE: Pesky Error v2.4.0

Are there any rules on the folder? That might cause an error like that, 
because it can hardcode a group ID (e.g. an inherited privilege to a group) 
into the rule. Easiest is to look at the attributes on the folder (and its 
parent folders up to root?) and see if any attribute has this group ID.

What group does the group ID correspond to? Maybe it's in the old system but 
not the new.

-Chad


-----Original Message-----
From:  
[] On Behalf Of O'Dowd, Josh
Sent: Tuesday, March 05, 2019 2:13 PM
To: 
Subject: [grouper-users] Pesky Error v2.4.0

Greetings.

I am pulling hair after a couple hours now, and thought I'd reach out and see 
if anyone has seen this error...

To provide a little context, we recently migrated our 2.3.0 oracle database 
over to a 2.4.0 postgres database, then deployed a fresh grouper 2.4.0 
UI/WS/API with the postgres backend.  To migrate the data, I ran gsh export 
on the 2.3.0, then gsh-executed the resulting script on 2.4.0.  The only 
errors the script output listed were for creating a single group in a folder 
with many groups that were already successfully moved.  I figured I would 
just manually rebuild that group and that is where I ran into this error:

"Error creating group: Subject not found: 'g:gsa': 
'3f70e9c855e244808dda2f7ee3cebef0', Problem in HibernateSession: 
HibernateSession (6e3f203a): notNew, notReadonly, READ_WRITE_NEW, 
activeTransaction, session (6cb2ab3e), Problem in HibernateSession: 
HibernateSession (5bc5ea81): new, notReadonly, READ_WRITE_NEW, 
notActiveTransaction, session (6cb2ab3e),...."

It doesn't matter what I try to name the group (in this case, "testing"), the 
folder gives this same error every time.  Furthermore, I CAN add/remove 
members in other groups in this folder, and I can add/remove groups in other 
folders that are in the same stem as the problem folder.

Very puzzling!  Any thoughts?

Thanks for the time.

Josh O'Dowd
University of Montana