Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Full Sync issues

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Full Sync issues


Chronological Thread 
  • From: "Hyzer, Chris" <>
  • To: "Weston, Todd" <>, "" <>
  • Subject: Re: [grouper-users] Full Sync issues
  • Date: Thu, 17 Dec 2020 16:48:52 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=isc.upenn.edu; dmarc=pass action=none header.from=isc.upenn.edu; dkim=pass header.d=isc.upenn.edu; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=u8ZbKQSUpU0aO3atAaboNv/8hDyJ9TpQ/QJ4UjKDME0=; b=EQbQIvypcsEUnFNcOkg8aBDglDle+FNyAeXgunIRRBZk+ad/NWfNqcuP5L8E/2CtkYEuKs37dFYnir/p3vybJg6Q0w36RkKGOEFGZvkFYFc3MAHeS99HbXRBc9Anqu83zpg51u8EfIaqYSw0/BwxWEqsIXENaLLKXg+k5t9zURbKq0NAp18LM6GJoPgldmErahImjzZQwrZYGrdXqX3aihw401qSbHWMaDQT7VXWhUfZXhpQZdTiPcFXl9uUCtYeltx8plQBImkOPHyQ92og1EH1PWoWOIWs1zeH0YArE3tp0WauEZy0Xxr6QALxWeY9IobKDwV636LmXWyOLndDoQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iAWNqkZ8QCOD8bt9b5gsWaHHuAu3yWy7h/6GC6tJqo+NXXuxrQQg1NZ83QGczX+aOi9CS5bWixnYsdOzwnh/yZU2kPAzM12R/Z3j8u1DBYJZKy8Jc+Ps5tSinmpJmFtZP69qzcVvAQmt+vHjN1xA3L2PpfQ32HE88QiwowtXUuDDiDqg/3e+xxwdgwYvQTnUs3gbxo10yOXDmqtB7EVLuaF4/pKi7bDh84g8u47QKqLs4klKgaFUg+vgy/MDeYz/lBTvjFJGiM3S5aialIp+ruGNk+pHCbqoCu/g+l2gbg3QoaBUTN/BInELX966fAs9/6u5aEnf6vpzUAo1VeehHA==

Can you slack me about this and we can work through it?

What pspng patch are you up?


From: <> on behalf of Weston, Todd <>
Sent: Wednesday, December 16, 2020 3:47 PM
To: Weston, Todd <>; <>
Subject: RE: [grouper-users] Full Sync issues
 

Small but significant update _ my test system is also failing to run fullSync jobs.

 

Also:

versions running:

2.4.0

API patches to 80

UI patches to 51

 

-

Todd Weston

Information Security Analyst

Washington State University

Phone 509.335.4479

 

From: <> On Behalf Of Weston, Todd
Sent: Wednesday, December 16, 2020 12:14 PM
To:
Subject: [grouper-users] Full Sync issues

 

I’ve been running Grouper in production for a couple of months now (in test for over a year).

 

I have an issue in production that the fullSync jobs are erroring out – so subjects are not being pulled out of groups (e.g. if their enterprise role group changes, they are now in both groups).

 

 

We use 10 “bushy” PSPNG provisioners in our grouper-loader.properties to provision groups in different OUs (all ten look like this with slightly different groupbase settings):

 

changeLog.consumer.pspng_activedirectory.class = edu.internet2.middleware.grouper.pspng.PspChangelogConsumerShim

changeLog.consumer.pspng_activedirectory.type = edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner

changeLog.consumer.pspng_activedirectory.quartzCron = 0 0/15 2-22 ? * * *

changeLog.consumer.pspng_activedirectory.ldapPoolName = active_directory

changeLog.consumer.pspng_activedirectory.isActiveDirectory = true

changeLog.consumer.pspng_activedirectory.memberAttributeName = member

changeLog.consumer.pspng_activedirectory.memberAttributeValueFormat = ${ldapUser.getDn()}

changeLog.consumer.pspng_activedirectory.groupSearchBaseDn = OU=grouper Groups,OU=Provisioned Groups,OU=Enterprise Groups,OU=WSU Authorization Groups,DC=ad,DC=wsu,DC=edu

changeLog.consumer.pspng_activedirectory.allGroupsSearchFilter = objectclass=group

changeLog.consumer.pspng_activedirectory.singleGroupSearchFilter = (&(objectclass=group)(cn=${group.extension}))

changeLog.consumer.pspng_activedirectory.groupCreationLdifTemplate = dn: cn=${group.extension}||cn: ${group.extension}||objectclass: group||sAMAccountName: ${group.extension}

changeLog.consumer.pspng_activedirectory.userSearchBaseDn = OU=NIDs,OU=WSU Accounts,DC=ad,DC=wsu,DC=edu

changeLog.consumer.pspng_activedirectory.userSearchFilter = wsuExternalSystemID=${subject.id}

changeLog.consumer.pspng_activedirectory.userSearchScope = SUBTREE

changeLog.consumer.pspng_activedirectory.userSearchAttributes = dn,cn,userprincipalname,wsuExternalSystemID,objectclass

otherJob.pspng_activedirectory.runAtStartup = true

otherJob.pspng_activedirectory.class = edu.internet2.middleware.grouper.pspng.FullSyncStarter

otherJob.pspng_activedirectory.quartzCron = 0 10 0 ? * * *

 


the error I get with the one provisioner set up to run at Startup (same as config shown above):

 

2020-12-16 12:01:48,338: [DefaultQuartzScheduler_Worker-1] ERROR JobRunShell.run(211) -  - Job DEFAULT.OTHER_JOB_pspng_activedirectory threw an unhandled Exception:

java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatistics;

        at edu.internet2.middleware.grouper.pspng.FullSyncStarter.execute(FullSyncStarter.java:110)

        at edu.internet2.middleware.grouper.app.loader.GrouperDaemonJob.execute(GrouperDaemonJob.java:57)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

2020-12-16 12:01:48,349: [DefaultQuartzScheduler_Worker-1] ERROR ErrorLogger.schedulerError(2401) -  - Job (DEFAULT.OTHER_JOB_pspng_activedirectory threw an exception.

org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatist

]

        at org.quartz.core.JobRunShell.run(JobRunShell.java:213)

        at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)

Caused by: java.lang.NoSuchMethodError: edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.startFullSyncOfAllGroupsAndWaitForCompletion(Ledu/internet2/middleware/grouper/app/loader/db/Hib3GrouperLoaderLog;)Ledu/internet2/middleware/grouper/pspng/JobStatistics;

        at edu.internet2.middleware.grouper.pspng.FullSyncStarter.execute(FullSyncStarter.java:110)

        at edu.internet2.middleware.grouper.app.loader.GrouperDaemonJob.execute(GrouperDaemonJob.java:57)

        at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

        ... 1 more

 

I have the same provisioners set up in our test Grouper app and the fullSync provisioners run fine pointed to our test AD instance. I’m at a wall – any clues would be appreciated as I’m not a Linux/programming guy at all….

 

-

Todd Weston

Information Security Analyst, Identity |

Information Technology Services | Washington State University

Phone 509.335.4479 PO Box 641222 Pullman, WA  99164-1222

 

QR to scan into contacts

 




Archive powered by MHonArc 2.6.19.

Top of Page