Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-1843

unresolvable error on auditing fields

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.3.1, 2.4.0, 2.3.0.patch
    • Component/s: None
    • Labels:
      None

      Description

       

      ----Original Message----
      From: Andrew Morgan morgan@orst.edu
      Sent: Tuesday, July 24, 2018 2:50 PM
      To: Hyzer, Chris <mchyzer@isc.upenn.edu>
      Cc: grouper-users@internet2.edu
      Subject: RE: [grouper-users] Error: "Cant find creator of ..."

       

      Aha, the error message was misleading!  Here is more of the stack trace:

       

      2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu : org : is : app : box : temp eligible

      edu.internet2.middleware.subject.SubjectNotFoundException: No results: searchSubject filter:(uid=%TERM%) searchValue: hagimotk

               at edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapUnique(LdapSourceAdapter.java:811)

               at edu.internet2.middleware.subject.provider.LdapSourceAdapter.getSubject(LdapSourceAdapter.java:375)

               at edu.internet2.middleware.grouper.subj.SourcesXmlResolver.find(SourcesXmlResolver.java:309)

               at edu.internet2.middleware.grouper.subj.CachingResolver.find(CachingResolver.java:143)

               at edu.internet2.middleware.grouper.subj.ValidatingResolver.find(ValidatingResolver.java:105)

               at edu.internet2.middleware.grouper.SubjectFinder.findByIdAndSource(SubjectFinder.java:504)

               at edu.internet2.middleware.grouper.Group.getModifySubject(Group.java:3690)

               at edu.internet2.middleware.grouper.grouperUi.beans.api.GuiObjectBase.getLastUpdatedByGuiSubject(GuiObjectBase.java:196)

      ...

       

      So it was actually failing to resolve the subject that last modified the

      group.  Digging in with SQL shows:

       

       

      SQL> select name, creator_id, MODIFIER_ID from grouper_groups where id = 'd32649c748ec4cb19e489b0ab5656f8f';

       

      NAME

      ----------------------------------------------------------------------------------------------------------------------------------

      CREATOR_ID                               MODIFIER_ID

      ---------------------------------------- ----------------------------------------

      osu:org:is:app:box:temp-eligible

      02c44e5a77fb4dbf81ce38515e9deed7         d8adf0aa82df489a9c3fe011d8734081

       

      SQL> select subject_id from grouper_members where id = '02c44e5a77fb4dbf81ce38515e9deed7';

       

      SUBJECT_ID

      ----------------------------------------------------------------------------------------------------------------------------------

      lomaxe

       

      SQL> select subject_id from grouper_members where id = 'd8adf0aa82df489a9c3fe011d8734081';

       

      SUBJECT_ID

      ----------------------------------------------------------------------------------------------------------------------------------

      hagimotk

       

       

      I understand now why I'm seeing this error.  As one of our former Grouper

      admins, hagimotk will be the modifier for many groups.

       

      What are the options for dealing with this?  Find all occurrences and

      "fix" them?  Stop removing subjects from the subject source? 

       

      It would be nice if the error message did not mislead me by using

      "creator" in its wording.

       

      Thanks,

                      Andy

       

      On Tue, 24 Jul 2018, Hyzer, Chris wrote:

       

      > Can you select the row from grouper_groups and see if the auditing member ids (creator_id, modifier_id) are still the old user (they should still have a row in grouper_members by

      > "id").  If you want to open a bug with that info we can fix that for you

      > Thanks

      > Chris

      > ----Original Message----

      > From: grouper-users-request@internet2.edu [grouper-users-request@internet2.edu] On Behalf Of Andrew Morgan

      > Sent: Monday, July 23, 2018 2:28 PM

      > To: grouper-users@internet2.edu

      > Subject: [grouper-users] Error: "Cant find creator of ..."

      > One of our Grouper admins left the university a while ago, and we recently

      > deleted her account from LDAP as part of our account lifecycle.  We

      > removed her Grouper memberships, but she had direct privileges on a few

      > groups.  I ran the USDU to remove those as well.

      > Even after running USDU, I'm seeing this curious error message in the UI

      > log when I view the Members or Privileges tab of specific group:

      > 2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu : org : is : app : box : temp eligible

      > edu.internet2.middleware.subject.SubjectNotFoundException: No results: searchSubject filter:(uid=%TERM%) searchValue: <username-redacted>

      > However, when I view "More" in the UI for the group, it says:

      > Creator:            Lomax, Erica (lomaxe)

      > (lomaxe is still a valid account, not the person that left).

      > Where is the "creator" in the error message coming from?

      > Thanks,

      > Andy Morgan

      > Systems Administrator, Identity & Access Management

      > Information Services | Oregon State University

        Attachments

          Activity

            People

            Assignee:
            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            Reporter:
            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Smart Checklist