Grouper Call of Feb. 1, 2023

Attending 

• Chris Hyzer, Penn, Chair
• Vivek Sachdiva, independent  
• Shilen Patel, Duke
• Chad Redman, UNC
• Carey Black, Purdue
• Gail H Lift, University of Michigan
• Gabor Eszes, Univ of Virginia
• Kellen Murphy, Univ of Virginia
• Jeremiah Haywood, Illinois State U
• Chris Hubing, Internet2
• Emily Eisbruch, Internet2

DISCUSSION

Administrivia

•  Internet2 Intellectual Property Policy
  
• Review AIs  Grouper Project Action Items (Google Doc)
  
•  Agenda Bash
  

New Action Item from this call

• AI Chris Hubing – talk to Evolveum about Grouper change from tomee to tomcat so they can update some test/demo scripts
  

Outreach:

• Chris Hyzer and Emily are working on a blog for the February Trust and Identity Newsletter. Focus on provisioning
  

Discussed on recent Components Architects Coordination call

• Documentation
• container work
  
• Accessibility testing
  
• Instrumentation / measurements / reporting
  
• Open Telemetry
  
• Suggestion from Carey
  
• Improve local architects’ ability to pre-test
  

Current Work

Vivek

• Working on provisioning
  
• Incremental workflow
  
• Things are working on Duo
  
• Need to test all the other provisioners
  
• In the past, USDU test used to fail and entity recalc test used to fail but should be working
  
• Getting close to finishing 
  
• SQL report issue was fixed
  
• Jeremiah : not caching an attribute, but caching a translation of an attribute
  JIRA 4584 - will this be included? Chris Hyzer: hope to include
  

GRP-4584
caching by script does not work

Shilen

• Upgrading Java, switching to tomcat
  
• Some unit tests fail, have failed in the past too
  
• UI and web services are working
  
  
  
• Breaking version issue
  
• AI - Chris Hubing will talk to Evolveum about Grouper change from tomee to tomcat so they can update some test/demo scripts
  
  

Versions https://spaces.at.internet2.edu/x/o4B6Ag

• Suggestion to do v4.0 version instead of 2.6.20
  
• Not changing DDL or anything major for this
  
• Focus on getting provisioning needs addressed
  
• v5 will have ABAC and more
  
• Shilen would still merge his changes into the 2.6 branch
  

Next for Shilen: 

• Maven, libraries upgrade
  
• SOAP as an option 
  

Reflection 

• Reflection and client code
  
• Remove from Grouper client utils
  
• Shilen will look at this
  

Chad

• Working with customers
  
• Provisioning is a hard problem
  
• Most using v 2.6.16
  
  
• Hard to find Grouper wiki doc on morph string
  
• Chad created a JIRA on the need for this doc
  
• GRP-4583
  Create wiki page for morphString
  
• There is a reference in the GSH wiki page
  
• Nuances: Password or reference to a file
  
• Rolling the key is not supported
  
  
  
• A customer wants to reduce the logging
  
• Concern about ejecting into splunk
  
• They want more control over what gets logged
  

Grouper Training on March 7

 https://incommon.org/academy/grouper-school/

• Mail capture in container
  

Issue Roundup 

Jiras in past two weeks

GRP-4586

Subject diagnostics incorrectly printing subject Id for identifier test

• 
  GRP-4585
  add a GSH change log consumer. Example is emailing supervisor when someone added to group
  
  
  
• 
  GRP-4584
  caching by script does not work
  
  
  
• 
  GRP-4583
  Create wiki page for morphString
  
  
  
• 
  GRP-4582
  add rate limiting to provisioning
  
  
  
• 
  GRP-4581
  membership import does not recognize header row
  
  
  
• 
  GRP-4580
  cannot remove 'recent memberships' loader configuration
  
  
  
• 
  GRP-4579
  when removing loader configuration, it should give a message about delete and redirect to main group screen
  
  
  
• 
  GRP-4578
  errors in configuration of oidc url should be more explicit
  
  
  
• 
  GRP-4577
  allow privileges to be read with READ privilege in groups
  
  
  
• 
  GRP-4576
  grouper provisioning full sync score should disable if -1
  
  
  
• 
  GRP-4575
  SubjectSourceCache.logStats() diagnostics should log at DEBUG level, not WARN
  
  
  
• 
  GRP-4574
  store state of hide/show left UI panel in user preferences in DB so persists across refresh or browsers or session.
  
  
  
• 
  GRP-4573
  add config in grouper-ui.properties to remove the "hide/show side panel" on left of UI, default to show
  
  
  
• 
  GRP-4572
  add sql config id to the sql report
  
  
  
• 
  GRP-4571
  email group id in reports show up only if not sending email
  
  
  
• 
  GRP-4569
  Attestation API markAsAttested(true) no effect
  
  

Grouper wiki updates in past two weeks

• GrouperShell (gsh)
  
• Grouper messaging to web service API
  
• OIDC authentication to Grouper UI
  
• Grouper reporting use cases
  
• Grouper custom template via GSH
  
• Grouper provisioning roles
  
• Grouper provisioning caching
  

Next Grouper Call: Wed. Feb 15, 2023