Grouper Users - Open Discussion List

[Thomas Heetderks <>]

    Thanks Shilen.
      
      You were right, I was finally able to determine how settings
      needed to be adjusted on the OpenLDAP server.
      
      I now get all records loading,,,
      BUT do you know what config issue would cause this:
      
      ERROR: Could not find subject by id 'xxxxx' in source: 'g:gsa'!
      
      I'm guessing this is a simple fix, but I have been hunting through
      the wiki, grouper-user posts and 
      haven't found an answer.
      
      Thanks so much!
      - Thomas

On 4/23/21 12:20 PM, Shilen Patel wrote:

It seems like Grouper is trying to do paging since the logs show the first query returns 400 results and then the second returns 100.  

Are you able to run a command line ldapsearch that has a page size of 400 and returns more than 500 using the same ldap account?  I don’t normally use openldap but I’m looking at some openldap docs that state the following:

“However, the size limit applies to the total count of entries returned within the search, and not to a single page.”

Are you able to increase the size limit for the ldap account that grouper is using?

Thanks!

- Shilen

On 4/23/21, 1:31 PM,   wrote:

    Been having issues trying to get my LDAP Grouper Loader to work.
    I don't understand why the paging (via pagedResultsSize) isn't working...
    When running the Diagnostic, it connects and queries successfully, but only
    returns the OPENLDAPs transaction limit (500).
    The grouper-loader.properties file has:
    
    ldap.enterpriseldap.pagedResultsSize = 400
    
    The OPENLDAP log shows:
    
    slapd[1249]: conn=1553 op=4 SRCH base="ou=people,dc=montana,dc=edu" scope=2
    deref=0 filter="(&(uid=groupersystem)(objectClass=person))"
    slapd[1249]: conn=1553 op=4 SRCH attr=cn uniqueIdentifier givenname sn uid
    mail
    slapd[1249]: conn=1553 op=4 SEARCH RESULT tag=101 err=0 nentries=0 text=
    slapd[1249]: conn=1553 op=5 SRCH base="ou=people,dc=montana,dc=edu" scope=2
    deref=0 filter="(&(|(uid=groupersystem)(employeeNumber=groupersystem))
    (objectClass=person))"
    slapd[1249]: conn=1553 op=5 SRCH attr=cn uniqueIdentifier givenname sn uid
    mail
    slapd[1249]: <= bdb_equality_candidates: (employeeNumber) not indexed
    slapd[1249]: conn=1553 op=5 SEARCH RESULT tag=101 err=0 nentries=0 text=
    slapd[1249]: conn=1553 op=6 SRCH base="ou=people,dc=montana,dc=edu" scope=2
    deref=0 filter="(objectClass=person)"
    slapd[1249]: conn=1553 op=6 SRCH attr=uniqueIdentifier
    slapd[1249]: conn=1553 op=6 SEARCH RESULT tag=101 err=0 nentries=400 text=
    slapd[1249]: conn=1553 op=7 SRCH base="ou=people,dc=montana,dc=edu" scope=2
    deref=0 filter="(objectClass=person)"
    slapd[1249]: conn=1553 op=7 SRCH attr=uniqueIdentifier
    slapd[1249]: conn=1553 op=7 SEARCH RESULT tag=101 err=4 nentries=100 text=
    
    Any help is greatly appreciated!
    - Thomas