Grouper Users - Open Discussion List

[Adam Chi-Lun Chang <>]

Thank you Carey & Chris.

 

Hi Carey,

Actually I am trying to hook up the public ldap from UCI, not the cmu one from the example.  I did try the Subject API diagnostics tool but it returned nothing.  Maybe I did something wrong in the subject.properties file?  I have attached in this email. 

 

Hi Chris,

I only ran 2 commands, one is DB and one is tomcat.  Where is the commend of the daemon?  Or are you saying in order for the subject.properties to work, I need to run the loader command like this? 

/bin/gsh.sh –loader

Thanks.

~Adam

 

 

 

 

 

From: <> On Behalf Of Hyzer, Chris
Sent: Friday, June 28, 2019 6:12 AM
To: Adam Chi-Lun Chang <>
Cc: Mailing List <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

Did you kill the processes first (or stop them gracefully)?

 

Btw, you don’t have to restart the DB, just the tomcat(s) and daemon.

 

Thanks

 

 

From: Black, Carey M. <>
Sent: Thursday, June 27, 2019 7:22 PM
To: Adam Chi-Lun Chang <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

Adam,

 

I am assuming you are using the “public ldap” listed on this page: https://spaces.at.internet2.edu/display/Grouper/LDAP+Subject+API+example

 

 

A very useful tool to “debug” the Subject API can be found in the UI.

 

Login as a user who is a member of the Wheel group. ( Use GrouperSystem if you have nothing else setup at this point.)

Under ”Quick Links” in the upper left corner click on “Miscellaneous” then click on “Subject API diagnostics”.

 

Set the ‘Source ID’ to the name of the subject source that you setup.

 

Enter test value(s) for ‘Subject ID:’, ‘Subject Identifier:’ and/or ‘Search String’. ( You can leave ‘Act as:’ blank. At this point that is not useful for basic testing. )

                ‘Subject ID’ = guid

                ‘Subject Identifier’ = cmuAndrewId

      ‘Search String’ searches cn, guid, or cmuAndrewId

 

A few entries that might make good search values…

 

cn                                           guid                                                                                                       cmuAndrewId

Mark Adamson                 00000000-0000-1000-0001-0800207F02E6                            adamson

Computing Services Advisor        00000000-0000-1000-0002-0800207F02E6            advisor

Azizan Abdul-Aziz            00000000-0000-1000-0005-0800207F02E6                            aa0u

Alberto Alesina                 00000000-0000-1000-0006-0800207F02E6                            aa12

Alice Bright                         00000000-0000-1000-0009-0800207F02E6                            ab03

               

 

Click the ‘Run diagnostics’ button and read through the results.

You likely will find clues/errors in what is returned.

 

It may help if you know some “good values” to search for.

 

If you are familiar with using an LDAP client then you can connect to the source that way too.

                I used a standard LDAP client (https://directory.apache.org/studio/  but feel free to use any ldap client you wish) to connect to that server to poke around outside of grouper.

                Hostname: ldap.andrew.cmu.edu , Port: 389 , no Authentication

 

Hope that helps.

 

--

Carey Matthew

 

From: <> On Behalf Of Adam Chi-Lun Chang
Sent: Thursday, June 27, 2019 7:54 PM
To: Hyzer, Chris <>
Cc: Mailing List <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

Thanks Chris.

 

I have followed the subject API wiki (https://spaces.at.internet2.edu/display/Grouper/Subject+API) to try to get the subject store setup from a public ldap.  Then I tried to restart the grouper instance (installed by the grouper installer) with these 2 commands but it does not seem to return any person from the ldap when I search to add a new member. 

 

"c:\Program Files\Java\jdk1.8.0_212\bin\java" -cp c:\OITDevEnv\Grouper\gi\grouper.apiBinary-2.4.0\lib\jdbcSamples\* org.hsqldb.Server -database.0 file:c:\OITDevEnv\Grouper\gi\grouper.apiBinary-2.4.0\grouper -dbname.0 grouper -port 9001

 

c:\OITDevEnv\Grouper\gi\apache-tomcat-8.5.12\bin\startup.bat

 

Any idea what I have missed?  Thanks.

 

~Adam

 

From: Hyzer, Chris <>
Sent: Wednesday, June 26, 2019 8:24 AM
To: Adam Chi-Lun Chang <>
Cc: Mailing List <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

https://spaces.at.internet2.edu/display/Grouper/Grouper+-+Loader+LDAP

https://spaces.at.internet2.edu/display/Grouper/Grouper+Loader+LDAP+examples

https://spaces.at.internet2.edu/display/Grouper/Grouper+Messaging+with+ActiveMQ

 

Let me know if you have issues

 

Thanks

Chris

 

From: Adam Chi-Lun Chang <>
Sent: Tuesday, June 25, 2019 2:26 PM
To: Hyzer, Chris <>
Cc: Mailing List <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

Thank you Chris.

 

After checking with my manager Warren Leung, we decide to experiment installing/configuring Grouper with the traditional way since Docker is not supported at UCI yet. 

 

What I would like to try is install & configure Grouper in a linux (Centos) box which can

-          import subjects (from ldap)

-          perform grouping functionalities

-          manage it through UI

-          let other app access it through WS/MQ

 

I assume it requires

-          Grouper Loader

-          DB configuration (using Maria DB)

-          Grouper API

-          Grouper UI

-          Grouper Client

-          Grouper WS

-          Grouper ActiveMQ Messaging

 

I found this page but it does not seem to cover the LDAP loader (configure to LDAP) and the ActiveMQ part.  https://spaces.at.internet2.edu/display/Grouper/Grouper+Getting+Started+Quickly

 

If there are no other documents then I will try it out first and definitely ask for help here.  Thanks. J

 

Regards,

~Adam

 

 

 

 

From: Hyzer, Chris <>
Sent: Monday, June 24, 2019 12:59 PM
To: Adam Chi-Lun Chang <>; Bill Thompson <>; Crawford, Jeffrey <>
Cc: Mailing List <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

If you can install and use docker that is best.  If we need to update certain docs let us know 😊

 

Thanks

Chris

 

From: Adam Chi-Lun Chang <>
Sent: Monday, June 24, 2019 3:19 PM
To: Hyzer, Chris <>; Bill Thompson <>; Crawford, Jeffrey <>
Cc: Mailing List <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

Hi Chris, Bill, Jeff,

 

Thank you so much for your responses.

 

Yes I ran through the installer again and recorded the print out.  After several trial and error I did get the commends I need to restart my grouper instance without rerun the installer all over again.  While installer provided me a quick way to play around the Grouper, is using the installer also the best way to move forward and start a pre-production environment in a Linux box?  This page (https://spaces.at.internet2.edu/pages/viewpage.action?pageId=15729363) indicated starting 2019 using docker container is the suggested method for installing grouper but there is only source code in the link (https://spaces.at.internet2.edu/display/ITAP/InCommon+Trusted+Access+Platform+Release).  Do I need to build and deploy docker to somewhere?  I guess my question is what’s the best/easiest/fastest way to just start up the grouper (api, ui, ws) out of the box?  There is also grouper.apiBinary-2.4.0 and this is what’s in the readme.

- Generally:

1. configure the non-example files in the conf dir

2a. If you are using hsqldb, start your database:

[windows]: java -cp lib\jdbcSamples\hsqldb-2.3.5.jar org.hsqldb.Server -database.0 file:grouper -dbname.0 grouper -port 9001

    [unix]: java -cp lib/jdbcSamples/hsqldb-2.3.5.jar org.hsqldb.Server -database.0 file:grouper -dbname.0 grouper -port 9001

2b. init your registry: [windows]: bin\gsh -registry -check -runscript

                          [unix]: bin/gsh -registry -check -runscript

3. start gsh: [windows]: bin\gsh

                [unix]: bin/gsh

https://spaces.internet2.edu/pages/viewpage.action?pageId=14517859

4. install the ui quickstart, or web services

 

 

 

 

Do I need to install apache tomcat first and then dump the whole apiBinary-2.4.0 folder somewhere in the apache? 

 

Sorry I don’t have too much of experience in grouper nor initiate an app like grouper in linux except deploy jars into tomcat.  Any help will be greatly appreciated.  Thanks.

 

Regards,

~Adam

 

 

 

From: Hyzer, Chris <>
Sent: Monday, June 24, 2019 7:46 AM
To: Bill Thompson <>;
Cc: Mailing List <>
Subject: RE: [grouper-users] how to restart grouper without running the installer again?

 

The commands to do everything are printed out when you do the installer.  Did you happen to keep the output?

 

If you run the installer again, but instead of “install”, you type “admin”, it should let you stop and start things.  Does it work?

 

Or in the tomcat dirs. There is “bin/shutdown.bat” and “bin/startup.bat”.  In the grouper dir is start-hsql.bat

 

Thanks!

Chris

 

From: <> On Behalf Of Bill Thompson
Sent: Monday, June 24, 2019 10:03 AM
To:
Cc: Grouper Users <>
Subject: Re: [grouper-users] how to restart grouper without running the installer again?

 

Adam,

 

If you are looking to easily spin up an environment with all the components so that you can evaluate and learn about Grouper, I'd recommend taking a look at the Grouper Training Environment.

https://spaces.at.internet2.edu/display/Grouper/Grouper+Training+Environment

 

Try this:

docker run -d -p 389:389 -p 8443:443 -p 3306:3306 \

  --name 101.1.1 tier/gte:101.1.1-201906

All of the GTE docker images you can run are here: https://hub.docker.com/r/tier/gte/tags

Account/passwords and other info about the GTE is here: https://github.internet2.edu/docker/grouper_training/tree/201906

 

I'd also recommend starting with the docker release packages instead of the Grouper installer.

https://spaces.at.internet2.edu/display/ITAP/InCommon+Trusted+Access+Platform+Release

https://github.internet2.edu/docker/grouper/tree/2.4.0-a29-u14-w3-p2-20190217

 

Best,

Bill

 

 

 

 

 

 

-----Original Message-----
From: Crawford, Jeffrey <>
Sent: Monday, June 24, 2019 7:32 AM
To: ;
Subject: Re: [grouper-users] how to restart grouper without running the installer again?

 

Hi Adam,

 

I'm not sure if the installer does this for you but I think you can use apache commons daemon to register java applications as windows services. Otherwise they should be listed as a service already.

 

Jeffrey C.

 

 

 

On Mon, Jun 24, 2019 at 9:43 AM <> wrote:

Hi,  I tried to experiment the grouper by running the installer in my windows
box and it worked fine.  However I have trouble restarting all the services
after that.  Is there a way to just start all the grouper components instead
of installing it all over again?  I tried to search the archive or wiki but
can't find an answer.  I am new to the grouper and any help will be greatly
appreciated.  Thanks.
~Adam

 

Attachment: subject.properties
Description: subject.properties