Grouper Users - Open Discussion List

[Shilen Patel <>]

Do you have a stacktrace?  What does your loader config look like?

 

Thanks!

 

- Shilen

 

From: Thomas Heetderks <>
Date: Monday, May 3, 2021 at 6:25 PM
To: Shilen Patel <>, T-Heetderks <>
Cc: "" <>
Subject: Re: [grouper-users] LDAP Grouper Loader paging issue

 

Thanks Shilen.

You were right, I was finally able to determine how settings needed to be adjusted on the OpenLDAP server.

I now get all records loading,,,
BUT do you know what config issue would cause this:

ERROR: Could not find subject by id 'xxxxx' in source: 'g:gsa'!

I'm guessing this is a simple fix, but I have been hunting through the wiki, grouper-user posts and
haven't found an answer.

Thanks so much!
- Thomas

On 4/23/21 12:20 PM, Shilen Patel wrote:

It seems like Grouper is trying to do paging since the logs show the first query returns 400 results and then the second returns 100.  

Are you able to run a command line ldapsearch that has a page size of 400 and returns more than 500 using the same ldap account?  I don’t normally use openldap but I’m looking at some openldap docs that state the following:

“However, the size limit applies to the total count of entries returned within the search, and not to a single page.”

Are you able to increase the size limit for the ldap account that grouper is using?

Thanks!

- Shilen

On 4/23/21, 1:31 PM,   wrote:

    Been having issues trying to get my LDAP Grouper Loader to work.

    I don't understand why the paging (via pagedResultsSize) isn't working...

    When running the Diagnostic, it connects and queries successfully, but only

    returns the OPENLDAPs transaction limit (500).

    The grouper-loader.properties file has:

    ldap.enterpriseldap.pagedResultsSize = 400

    The OPENLDAP log shows:

    slapd[1249]: conn=1553 op=4 SRCH base="ou=people,dc=montana,dc=edu" scope=2

    deref=0 filter="(&(uid=groupersystem)(objectClass=person))"

    slapd[1249]: conn=1553 op=4 SRCH attr=cn uniqueIdentifier givenname sn uid

    mail

    slapd[1249]: conn=1553 op=4 SEARCH RESULT tag=101 err=0 nentries=0 text=

    slapd[1249]: conn=1553 op=5 SRCH base="ou=people,dc=montana,dc=edu" scope=2

    deref=0 filter="(&(|(uid=groupersystem)(employeeNumber=groupersystem))

    (objectClass=person))"

    slapd[1249]: conn=1553 op=5 SRCH attr=cn uniqueIdentifier givenname sn uid

    mail

    slapd[1249]: <= bdb_equality_candidates: (employeeNumber) not indexed

    slapd[1249]: conn=1553 op=5 SEARCH RESULT tag=101 err=0 nentries=0 text=

    slapd[1249]: conn=1553 op=6 SRCH base="ou=people,dc=montana,dc=edu" scope=2

    deref=0 filter="(objectClass=person)"

    slapd[1249]: conn=1553 op=6 SRCH attr=uniqueIdentifier

    slapd[1249]: conn=1553 op=6 SEARCH RESULT tag=101 err=0 nentries=400 text=

    slapd[1249]: conn=1553 op=7 SRCH base="ou=people,dc=montana,dc=edu" scope=2

    deref=0 filter="(objectClass=person)"

    slapd[1249]: conn=1553 op=7 SRCH attr=uniqueIdentifier

    slapd[1249]: conn=1553 op=7 SEARCH RESULT tag=101 err=4 nentries=100 text=

    Any help is greatly appreciated!

    - Thomas