Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

Can you please discuss this on the incommon-grouper slack channel?

There was a problem with deleting groups, its fixed in 2.5 🙂  You didnt go to 2.5?  🙂

As a workaround you could make Grouper not authoritative (i.e. dont delete groups) until you get on 2.5 with the fixed code?  and maybe adjust the credential to not be able to delete?

---

From: <> on behalf of Siju Jacob <>
Sent: Monday, April 5, 2021 5:51 PM
To: <>
Subject: [grouper-users] Grouper 2.4 upgrade deleted some groups from Active Directory

 

Hi Team,

     We upgraded to grouper 2.4 over the week end.

We were using PSPNG with grouper 2.3 as well.

Next day PSPNG full sync ran and deleted some of the groups from Active Directory.

Did any of you come across such an issue.

 

Below is the only logs I could find although running in debug mode.

 

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:567 - Fetching membership attribute, too

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:777 - Evaluated SingleGroupSearchFilter Jexl _expression_: '39630'

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:777 - Evaluated SingleGroupSearchFilter Jexl _expression_: 'ru-student'

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:797 - Evaluated entire SingleGroupSearchFilter Jexl _expression_: '(&(objectclass=group)(gidNumber=39630)(cn=ru-student))'

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:531 - pspng_activedirectory-full: Searching for group ds:rad:ru-student/#39630(Existing) with:: [org.ldaptive.SearchFilter@1958711200::filter=(&(objectclass=group)(gidNumber=39630)(cn=ru-student)), parameters={}]

2021-04-04 04:06:15 DEBUG LdapSystem:796 - Running ldap search: <OU=Groups,DC=rad,DC=rutgers,DC=edu>/SUBTREE: (&(objectclass=group)(gidNumber=39630)(cn=ru-student)) << {}

2021-04-04 04:06:15 DEBUG LdapSystem:730 - Doing ldap search: [org.ldaptive.SearchFilter@1958711200::filter=(&(objectclass=group)(gidNumber=39630)(cn=ru-student)), parameters={}] / OU=Groups,DC=rad,DC=rutgers,DC=edu / [cn, gidNumber, samAccountName, objectclass, member]

2021-04-04 04:06:15 DEBUG LdapSystem:740 - Using attribute-value paging

2021-04-04 04:06:15 DEBUG LdapSystem:751 - Using ldap search-result paging

2021-04-04 04:06:15 DEBUG LdapSystem:807 - Ldap result: CN=ru-student,OU=Groups,DC=rad,DC=rutgers,DC=edu

2021-04-04 04:06:15 INFO  LdapSystem:819 - LDAP search returned 1 entries

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:542 - pspng_activedirectory-full: Group search returned cn=ru-student,ou=groups,dc=rad,dc=rutgers,dc=edu

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:1125 - Adding target-system group to cache: ds:rad:ru-student/#39630(Existing)

2021-04-04 04:06:15 DEBUG pspng_activedirectory-full:567 - Fetching membership attribute, too

 

2021-04-04 04:06:36 INFO  LdapSystem:404 - rutgersRad: Deleting LDAP object: cn=ru-student,ou=groups,dc=rad,dc=rutgers,dc=edu

 

 

Any advice or guidance will be of great help and would be greatly appreciated..!

 

 

Thanks,

Siju Jacob