Grouper Users - Open Discussion List

[Michael Carrick <>]

Hello.

I'm looking for some advice on a situation I have with TLS1.2, Java 1.7_80 
and Grouper 2.2.2.

We have an urgent requirement to use TLS1.2 for our grouperloader service to 
communicate with our domain controllers, over LDAP.  We are running Grouper 
2.2.2 with Java 1.7_80 and I believe TLS1.0/1.1 is currently used, however 
this about to be disabled on our domain controllers.

Getting TLS1.2 to work with Grouper 2.2.2/Java1.7 seems to be complicated and 
maybe impossible with Grouper.   
My understanding is that TLS1.2 is the default protocol in java 1.8, however 
Java 1.8 is not ideal with Grouper 2.2 and despite connecting with LDAP at 
service start up, it proceeds to give some error messages when pushing a new 
group in the Active directory and fails to do so.
Has anyone experience of enabling TLS1.2 in Grouper 2.2.2?


I've now began to test the upgrade to Grouper 2.3 (then onto 2.4 ideally).  
The upgrade process is taking 26 hours to run the SQL DDL script which is 
frustrating and I'm yet to complete the upgrade successfully. I'm now on the 
second attempt but this time plan to upgrade each component (UI, WS API), 
test thoroughly then move onto the next component.
We tried to upgrade to 2.3 in the past but found PSPNG would not work as 
reliably for us as PSP did, hence our hesitancy in upgrading.


Any thoughts or advice would be very much appreciated.

Many thanks,

Michael Carrick
Newcastle University