Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-1134

add hook to make sure names of different types of objects are unique (group, stem, attribute, attribute definition)

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.2.1
    • Fix Version/s: 2.2.1.patch, 2.2.2, 2.3.0
    • Component/s: API, UI
    • Labels:
      None

      Description

      From: grouper-users-request@internet2.edu On Behalf Of David Langenberg
      Sent: Wednesday, April 29, 2015 1:17 PM
      To: Jutta Biernath
      Cc: Gouper Users
      Subject: Re: [grouper-users] Problem with PSP if stem and group have equal names

      Are you doing flat or bushy provisioning? It sounds like bushy and for that I can think of two immediate fixes. First change your provisioning to "flat" which will ensure proper uniqueness of names. Second, write a Grouper Hook to keep the folder vs group names unique.

      Dave

      On Wed, Apr 29, 2015 at 6:20 AM, Jutta Biernath wrote:
      Hi,

      some of our provisioned stems contain groups and stems with equal names, i.e.
      for instance the stem "downloads" contains another stem "endnote" as well as a
      group "endnote". We have not many, but several cases like that.

      The problem is now that the PSP (version 2.1.5) doesn't seem to provision that
      correctly. In a bulkSync the group is created and provisioned, but the stem
      isn't. If the group is renamed (so that both have different names) the stem is
      also provisioned. If then the group name is changed to the original name again
      (so that both again have equal names) both are indeed provisioned, but the PSP
      result on stdout shows an error, saying that the stem couldnt' be deleted due
      to subordinate objects ([LDAP: error code 66 - subordinate objects must be
      deleted first]).

      As workaround we have renamed the groups to make sure both stem and group have
      different names. But I think cases like that will also happen in the future
      every now and then, therefore it would be great if a solution could be found.

      Thank you,

      Jutta Biernath


      David Langenberg
      Identity & Access Management Architect
      The University of Chicago

        Smart Checklist

          Attachments

            Activity

              People

              • Assignee:
                chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
                Reporter:
                chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: