Grouper Users - Open Discussion List

["Weston, Todd" <>]

I’ve been running Grouper in production for a couple of months now (in test for over a year).

 

I have an issue in production that the fullSync jobs are erroring out – so subjects are not being pulled out of groups (e.g. if their enterprise role group changes, they are now in both groups).

 

 

We use 10 “bushy” PSPNG provisioners in our grouper-loader.properties to provision groups in different OUs (all ten look like this with slightly different groupbase settings):

 

changeLog.consumer.pspng_activedirectory.class = edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim

changeLog.consumer.pspng_activedirectory.type = edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner

changeLog.consumer.pspng_activedirectory.quartzCron = 0 0/15 2-22 ? * * *

changeLog.consumer.pspng_activedirectory.ldapPoolName = active_directory

changeLog.consumer.pspng_activedirectory.isActiveDirectory = true

changeLog.consumer.pspng_activedirectory.memberAttributeName = member

changeLog.consumer.pspng_activedirectory.memberAttributeValueFormat = ${ldapUser.getDn()}

changeLog.consumer.pspng_activedirectory.groupSearchBaseDn = OU=grouper Groups,OU=Provisioned Groups,OU=Enterprise Groups,OU=WSU Authorization Groups,DC=ad,DC=wsu,DC=edu

changeLog.consumer.pspng_activedirectory.allGroupsSearchFilter = objectclass=group

changeLog.consumer.pspng_activedirectory.singleGroupSearchFilter = (&(objectclass=group)(cn=${group.extension}))

changeLog.consumer.pspng_activedirectory.groupCreationLdifTemplate = dn: cn=${group.extension}||cn: ${group.extension}||objectclass: group||sAMAccountName: ${group.extension}

changeLog.consumer.pspng_activedirectory.userSearchBaseDn = OU=NIDs,OU=WSU Accounts,DC=ad,DC=wsu,DC=edu

changeLog.consumer.pspng_activedirectory.userSearchFilter = wsuExternalSystemID=${subject.id}

changeLog.consumer.pspng_activedirectory.userSearchScope = SUBTREE

changeLog.consumer.pspng_activedirectory.userSearchAttributes = dn,cn,userprincipalname,wsuExternalSystemID,objectclass

otherJob.pspng_activedirectory.runAtStartup = true

otherJob.pspng_activedirectory.class = edu.internet2.middleware.grouper.pspng.FullSyncStarter

otherJob.pspng_activedirectory.quartzCron = 0 10 0 ? * * *

 

the error I get with the one provisioner set up to run at Startup (same as config shown above):

 

2020-12-16 12:01:48,338: [DefaultQuartzScheduler_Worker-1] ERROR JobRunShell.run(211) -  - Job DEFAULT.OTHER_JOB_pspng_activedirectory threw an unhandled Exception:

java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatistics;

        at edu.internet2.middleware.grouper.pspng.FullSyncStarter.execute(FullSyncStarter.java:110)

        at edu.internet2.middleware.grouper.app.loader.GrouperDaemonJob.execute(GrouperDaemonJob.java:57)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

2020-12-16 12:01:48,349: [DefaultQuartzScheduler_Worker-1] ERROR ErrorLogger.schedulerError(2401) -  - Job (DEFAULT.OTHER_JOB_pspng_activedirectory threw an exception.

org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatist

]

        at org.quartz.core.JobRunShell.run(JobRunShell.java:213)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

Caused by: java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatistics;

        at edu.internet2.middleware.grouper.pspng.FullSyncStarter.execute(FullSyncStarter.java:110)

        at edu.internet2.middleware.grouper.app.loader.GrouperDaemonJob.execute(GrouperDaemonJob.java:57)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        ... 1 more

 

I have the same provisioners set up in our test Grouper app and the fullSync provisioners run fine pointed to our test AD instance. I’m at a wall – any clues would be appreciated as I’m not a Linux/programming guy at all….

 

-

Todd Weston

Information Security Analyst, Identity |

Information Technology Services | Washington State University

Phone 509.335.4479 PO Box 641222 Pullman, WA  99164-1222