Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-1893

pspng provisions groups which shouldnt be there

    XMLWordPrintable

Details

    Description

      From: grouper-users-request@internet2.edu <grouper-users-request@internet2.edu> on behalf of Ryan Rumbaugh <rrumbaugh@nebraska.edu>
      Sent: Friday, September 7, 2018 1:43 PM
      To: grouper-users@internet2.edu
      Subject: [grouper-users] PSPNG - Provisioning random groups?

       
      Hi all,

       

      Curious if anyone else has seen PSPNG provision groups that do not have the provision_to attribute assigned? We’re seeing happen quite a bit on loader groups for some odd reason. This is on Grouper 2.3 with PSPNG patch 20 applied. I don’t notice any particular rhyme or reason why it is attempting to provision just some of the loader groups, but not all. Any ideas? Thanks.

       

       

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:14,393: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR LdapGroupProvisioner.createGroup(394) -  - Problem while creating new group: dn: cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at java.lang.Thread.run(Thread.java:748)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:201)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:290)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.fullSyncGroup(FullSyncProvisioner.java:661)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1377)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:39)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:179)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:383)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:731)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.ensureLdapOusExist(LdapProvisioner.java:622)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at com.unboundid.ldap.sdk.DN.<init>(DN.java:283)

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: #011at com.unboundid.ldap.sdk.DN.<init>(DN.java:380)

                     

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: LDAPException(resultCode=34 (invalid DN syntax), errorMessage='The provided string could not be decoded as a DN because no equal sign was found after the RDN attribute 'NE'.')

      Sep  7 12:30:14 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:14,393: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR LdapProvisioner.ensureLdapOusExist(630) -  - Problem parsing DN cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools,OU=Grouper-ES,DC=unl,DC=edu

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at java.lang.Thread.run(Thread.java:748)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:201)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:290)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.fullSyncGroup(FullSyncProvisioner.java:661)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1377)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:39)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:179)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:383)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:731)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.ensureLdapOusExist(LdapProvisioner.java:631)

                     

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: edu.internet2.middleware.grouper.pspng.PspException: Problem parsing DN: cn=basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools,OU=Grouper-ES,DC=unl,DC=edu

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: grouper-api;grouper_error.log;;;2018-09-07 17:30:13,292: [FullSyncer(pspng_ad_lincoln)-Thread] ERROR FullSyncProvisioner.fullSyncGroup(668) -  - FullSyncer(pspng_ad_lincoln): Problem doing full sync. Requeuing group basis:hr:pa:2000:title:Dir, NE Ctr Rsrch on Youth/Fam/Schools

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at java.lang.Thread.run(Thread.java:748)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner$1.run(FullSyncProvisioner.java:201)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.thread_manageFullSyncProcessing(FullSyncProvisioner.java:290)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.FullSyncProvisioner.fullSyncGroup(FullSyncProvisioner.java:661)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.Provisioner.doFullSync(Provisioner.java:1377)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:39)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.doFullSync(LdapGroupProvisioner.java:179)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapGroupProvisioner.createGroup(LdapGroupProvisioner.java:383)

      Sep  7 12:30:13 localhost 3fd8faeecaf8[14576]: #011at edu.internet2.middleware.grouper.pspng.LdapProvisioner.performLdapAdd(LdapProvisioner.java:731)

       

      Ryan Rumbaugh

      Identity Management Specialist

      Cybersecurity & Identity |ITS|

      501 123.1, 68588-0203

      University of Nebraska |nebraska.edu

      Kearney|Lincoln|Omaha

      402-472-0831 (o)

      Attachments

        Issue Links

          Activity

            People

              bert.beelindgren@at.internet2.edu Bert Bee-Lindgren
              chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Smart Checklist