Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Full Sync issues

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Full Sync issues


Chronological Thread 
  • From: "Weston, Todd" <>
  • To: "Weston, Todd" <>, "" <>
  • Subject: RE: [grouper-users] Full Sync issues
  • Date: Wed, 16 Dec 2020 20:47:56 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=wsu.edu; dmarc=pass action=none header.from=wsu.edu; dkim=pass header.d=wsu.edu; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0W/LftPyyuBnMMA9Ebde9ldGp0oZ52UFHC3y75UIhxw=; b=AQC7CAJ4hyuJlQcygvxEWkYrx6FV/C762r/riMGh4ZcHeOqQ4J8gkWo3SnQTlg+a2PwBhG8CEa113rHEffYw4xPe1t6x4jZzltSqaHOrXmCpIfION2GVypB5SBUUwuysphAd63xwEKBj86mC9ADaNPySTYYOFwLQKoKm47GBxfngoFM6nOwQDPWUqZ7gVlMTmHQePu+oH+47NAYNfdI78gN5mTEfE9cA7G8pPvxLHzWeLIQwM7AcTV+c5wCAxST5PsKNVaJmkP+l8NeNd4nmAI7Q4ZGY8hnxoyO0mcTgL4PwDezrAMq7zjW+jRosNK+4RWH65AsMJHjDp2vtOMBxSQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Km/62EaCdUfjW6rJwUiGJOvdxsTdgjRoxplLt8JEkH45ZxXph0ZGlNpiy+0A17ewBVfvJzCR1NopVgedxtIfRl9x8J7yFwn6iJcAPPx/oNHz/2YoKTGaFT16mpXaiSXGMBKj7l30b47ma/gjkbTNjEKy/xITwGnqEvlxytcczl2A98cv4ihVL3Kft75SBotIvMbj/wGLMSmBNVYYV+5ReZ3bFB+maLUkw4Kr/Ip2hLGmdy5kbO30uYkZbU+BodiO8Dk/oMm5GvbPB/XY2vUX3RcTNyQRya7W2cmMx4NupjWj0N/9+3ee1Nc+kfVgLD0zl9GHdJJKwjlFP3AYldUOAg==

Small but significant update _ my test system is also failing to run fullSync jobs.

 

Also:

versions running:

2.4.0

API patches to 80

UI patches to 51

 

-

Todd Weston

Information Security Analyst

Washington State University

Phone 509.335.4479

 

From: <> On Behalf Of Weston, Todd
Sent: Wednesday, December 16, 2020 12:14 PM
To:
Subject: [grouper-users] Full Sync issues

 

I’ve been running Grouper in production for a couple of months now (in test for over a year).

 

I have an issue in production that the fullSync jobs are erroring out – so subjects are not being pulled out of groups (e.g. if their enterprise role group changes, they are now in both groups).

 

 

We use 10 “bushy” PSPNG provisioners in our grouper-loader.properties to provision groups in different OUs (all ten look like this with slightly different groupbase settings):

 

changeLog.consumer.pspng_activedirectory.class = edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim

changeLog.consumer.pspng_activedirectory.type = edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner

changeLog.consumer.pspng_activedirectory.quartzCron = 0 0/15 2-22 ? * * *

changeLog.consumer.pspng_activedirectory.ldapPoolName = active_directory

changeLog.consumer.pspng_activedirectory.isActiveDirectory = true

changeLog.consumer.pspng_activedirectory.memberAttributeName = member

changeLog.consumer.pspng_activedirectory.memberAttributeValueFormat = ${ldapUser.getDn()}

changeLog.consumer.pspng_activedirectory.groupSearchBaseDn = OU=grouper Groups,OU=Provisioned Groups,OU=Enterprise Groups,OU=WSU Authorization Groups,DC=ad,DC=wsu,DC=edu

changeLog.consumer.pspng_activedirectory.allGroupsSearchFilter = objectclass=group

changeLog.consumer.pspng_activedirectory.singleGroupSearchFilter = (&(objectclass=group)(cn=${group.extension}))

changeLog.consumer.pspng_activedirectory.groupCreationLdifTemplate = dn: cn=${group.extension}||cn: ${group.extension}||objectclass: group||sAMAccountName: ${group.extension}

changeLog.consumer.pspng_activedirectory.userSearchBaseDn = OU=NIDs,OU=WSU Accounts,DC=ad,DC=wsu,DC=edu

changeLog.consumer.pspng_activedirectory.userSearchFilter = wsuExternalSystemID=${subject.id}

changeLog.consumer.pspng_activedirectory.userSearchScope = SUBTREE

changeLog.consumer.pspng_activedirectory.userSearchAttributes = dn,cn,userprincipalname,wsuExternalSystemID,objectclass

otherJob.pspng_activedirectory.runAtStartup = true

otherJob.pspng_activedirectory.class = edu.internet2.middleware.grouper.pspng.FullSyncStarter

otherJob.pspng_activedirectory.quartzCron = 0 10 0 ? * * *

 


the error I get with the one provisioner set up to run at Startup (same as config shown above):

 

2020-12-16 12:01:48,338: [DefaultQuartzScheduler_Worker-1] ERROR JobRunShell.run(211) -  - Job DEFAULT.OTHER_JOB_pspng_activedirectory threw an unhandled Exception:

java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatistics;

        at edu.internet2.middleware.grouper.pspng.FullSyncStarter.execute(FullSyncStarter.java:110)

        at edu.internet2.middleware.grouper.app.loader.GrouperDaemonJob.execute(GrouperDaemonJob.java:57)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

2020-12-16 12:01:48,349: [DefaultQuartzScheduler_Worker-1] ERROR ErrorLogger.schedulerError(2401) -  - Job (DEFAULT.OTHER_JOB_pspng_activedirectory threw an exception.

org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatist

]

        at org.quartz.core.JobRunShell.run(JobRunShell.java:213)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

Caused by: java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatistics;

        at edu.internet2.middleware.grouper.pspng.FullSyncStarter.execute(FullSyncStarter.java:110)

        at edu.internet2.middleware.grouper.app.loader.GrouperDaemonJob.execute(GrouperDaemonJob.java:57)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        ... 1 more

 

I have the same provisioners set up in our test Grouper app and the fullSync provisioners run fine pointed to our test AD instance. I’m at a wall – any clues would be appreciated as I’m not a Linux/programming guy at all….

 

-

Todd Weston

Information Security Analyst, Identity |

Information Technology Services | Washington State University

Phone 509.335.4479 PO Box 641222 Pullman, WA  99164-1222

 

QR to scan into contacts

 




Archive powered by MHonArc 2.6.19.

Top of Page