Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-5307

Provisioner case sensitive compare wants to change value only differing in case

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Minor
    • None
    • None
    • provisioning
    • None

    Description

      A groupOfNames provisioner, values for ldap_dn and cn are set for case sensitive compare=false. Testing an initial provisioning run for a Grouper group "case_sensitive2", which should be matching an existing LDAP group "CASE_SENSITIVE2". The matching succeeds, but it still wants to update the CN to match the Grouper case. It also wants to update the DN, but this has no effect in LDAP.

      Note: The existing LDAP group had no members, so adding the membership also shows up under the ldap mods.

       

      2024-02-07 23:42:51.565: Provisioner 'xxx' (v2mo131w) state 'retrieveIndividualTargetMemberships' type 'fullProvisionFull': {state=retrieveIndividualMembershipsIfNeeded, linkGcSyncEntitiesUpdated=1, retrieveTargetMembershipsMillis=0}
      ...
      (v2mo131w): 0. Group(matchingAttrs: LinkedHashSet(1): [0]: [ldap_dn, val: cn=CASE_SENSITIVE2,ou=Groups,dc=example,dc=edu, compareVal: cn=case_sensitive2,ou=groups,dc=example,dc=edu, currentValue: true], attr[cn]: "CASE_SENSITIVE2", attr[ldap_dn]: "cn=CASE_SENSITIVE2,ou=Groups,dc=example,dc=edu", attr[member]: HashSet(1): [0]: , attr[objectClass]: HashSet(2): [0]: top, [1]: groupOfNames)
       
      ...
       
      2024-02-07 23:42:51.566: Provisioner 'xxx' (v2mo131w) state 'compareTargetObjects' type 'fullProvisionFull': {state=compareTargetObjects, provisioningMembershipWrappersWithNoMatch=1, groupUpdatesAfterCompare=2}
      ...
      (v2mo131w): 0. Group(matchingAttrs: LinkedHashSet(1): [0]: [ldap_dn, val: cn=case_sensitive2,ou=Groups,dc=example,dc=edu, compareVal: cn=case_sensitive2,ou=groups,dc=example,dc=edu, currentValue: true], attr[cn]: "case_sensitive2", attr[ldap_dn]: "cn=case_sensitive2,ou=Groups,dc=example,dc=edu", attr[member]: TreeSet(1): [0]: uid=800000000,ou=People,dc=example,dc=edu, attr[objectClass]: LinkedHashSet(2): [0]: top, [1]: groupOfNames, upd cn "CASE_SENSITIVE2" -> "case_sensitive2", upd ldap_dn "cn=CASE_SENSITIVE2,ou=Groups,dc=example,dc=edu" -> "cn=case_sensitive2,ou=Groups,dc=example,dc=edu", ins member "uid=800000000,ou=People,dc=example,dc=edu", del member "", recalcObject: true, recalcMships: true, selectProcessed: true)
       
      ...
      2024-02-07 23:42:51.57: v2mo131w, xxx, fullProvisionFull: INFO: Command log for provisioner 'xxx' - 'v2mo131w', updateGroup: Ldaptive modifyRequest (ucbLdap): [org.ldaptive.ModifyRequest@552734613::modifyDn=cn=case_sensitive2,ou=Groups,dc=example,dc=edu, attrMods=[[org.ldaptive.AttributeModification@441571526::attrMod=REMOVE, attribute=[cn[CASE_SENSITIVE2]]], [org.ldaptive.AttributeModification@1489644585::attrMod=ADD, attribute=[cn[case_sensitive2]]], [org.ldaptive.AttributeModification@1002284252::attrMod=REMOVE, attribute=[member[]]], [org.ldaptive.AttributeModification@184781465::attrMod=ADD, attribute=[member[uid=800000000,ou=People,dc=example,dc=edu]]]], controls=null, referralHandler=null, intermediateResponseHandlers=null]
      Ldaptive modifyResponse (ucbLdap): [org.ldaptive.Response@528544983::result=null, resultCode=SUCCESS, message=null, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1]
       
      
      

      Attachments

        Activity

          People

            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            chad.redman.3@at.internet2.edu Chad Redman
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: