Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

I think we have another patch to release ASAP which might address it,  let me confirm with bert

Chris Hyzer

Application Architect

PennGroups, Two-step, NGSS Security

---

From: <> on behalf of Crawford, Jeffrey <>
Sent: Monday, August 12, 2019 6:08:42 PM
To: Grouper Users <>
Subject: [grouper-users] Having PSPNG Oddities after update to patch 8

 

Hi,

 

We’re seeing some strange behavior in the pspng fullSyncer I don’t remember seeing this before we went from patch 3 to patch 8. The error message is:

2019-08-12 14:55:00,578: [DefaultQuartzScheduler_Worker-7] DEBUG GrouperLoaderType$5.runJob(653) -  - operation: runJob, jobName: CHANGE_LOG_consumer_pspng_zoom_pro, consumerName: pspng_zoom_pro, className: edu.internet2.middleware.grouper.pspng.PspChangel

ogConsumerShim, class found: true, instance created: true, success: true, recordsProcessed: 0

2019-08-12 14:55:00,578: [DefaultQuartzScheduler_Worker-7] ERROR GrouperLoaderJob.runJob(485) -  - Error on job: CHANGE_LOG_consumer_pspng_zoom_pro

java.lang.RuntimeException: Error in loader job: null, check logs: Error: java.lang.RuntimeException: No entries provisioned. Batch-filtering failed: Jexl evaluation failed: variable 'stemAttributes' is not defined in script: 'utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to'])'

        at edu.internet2.middleware.grouper.pspng.Provisioner.provisionBatchOfItems(Provisioner.java:1780)

        at edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim.processChangeLogEntries(PspChangelogConsumerShim.java:74)

        at edu.internet2.middleware.grouper.changeLog.ChangeLogHelper.processRecords(ChangeLogHelper.java:245)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderType$5.runJob(GrouperLoaderType.java:638)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:465)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:345)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

Caused by: edu.internet2.middleware.grouper.pspng.PspException: Jexl evaluation failed: variable 'stemAttributes' is not defined in script: 'utils.containedWithin(provisionerName, stemAttributes['etc:pspng:provision_to'], groupAttributes['etc:pspng:provision_to']) && !utils.containedWithin(provisionerName, stemAttributes['etc:pspng:do_not_provision_to'], groupAttributes['etc:pspng:do_not_provision_to'])'

        at edu.internet2.middleware.grouper.pspng.Provisioner.evaluateJexlExpression(Provisioner.java:788)

        at edu.internet2.middleware.grouper.pspng.Provisioner.shouldGroupBeProvisioned(Provisioner.java:1725)

        at edu.internet2.middleware.grouper.pspng.Provisioner.filterWorkItems(Provisioner.java:460)

        at edu.internet2.middleware.grouper.pspng.Provisioner.provisionBatchOfItems(Provisioner.java:1775)

        ... 7 more

Did not get all the way through the batch! -1 != 8221922

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.runJob(GrouperLoaderJob.java:474)

        at edu.internet2.middleware.grouper.app.loader.GrouperLoaderJob.execute(GrouperLoaderJob.java:345)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

 

 

However I think the Jexl part of the message is a red herring as this is the configuration for that pspng provisioner. There is no Jexl involved:

changeLog.consumer.pspng_zoom_pro.class = edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim

changeLog.consumer.pspng_zoom_pro.type = edu.internet2.middleware.grouper.pspng.LdapAttributeProvisioner

changeLog.consumer.pspng_zoom_pro.quartzCron = 0 * * * * ?

changeLog.consumer.pspng_zoom_pro.retryOnError = true

changeLog.consumer.pspng_zoom_pro.ldapPoolName = personLdap

changeLog.consumer.pspng_zoom_pro.provisionedAttributeName = eduPersonEntitlement

changeLog.consumer.pspng_zoom_pro.provisionedAttributeValueFormat = urn:mace:ucla.edu:entitlement:zoom:zoom-pro

changeLog.consumer.pspng_zoom_pro.userSearchBaseDn = ou=people,dc=edtest,dc=ucla,dc=edu

changeLog.consumer.pspng_zoom_pro.userSearchFilter = uclaPPID=${subject.id}

changeLog.consumer.pspng_zoom_pro.userSearchAttributes = dn,cn,uid,mail,samAccountName,uidNumber,objectClass,uclaPPID

 

The provisionedAttributeValueFormat is a static string

 

Thanks

Jeffrey C.