Grouper Call of Jan. 17, 2024

Attending 

• Chris Hyzer, Penn, Chair
• Chad Redmond, Unicon
• Vivek Sachdiva, independent
• Shilen Patel, Duke
• Carey Black, Purdue
• Gail Lift, University of Michigan
• Liam Hoekenga, University of Michigan
• Chris Hubing, Internet2

• Drew Aschenbrener, Internet2

Administrivia

•  Internet2 Intellectual Property Policy
  
• Review AIs  Grouper Project Action Items (Google Doc)
  
•  Agenda Bash
  

Current Work

Vivek

• Team Dynamix work is done; U Nebraska particularly interested in this work
• Not the simplest provisioner
• Documentation:

•   Grouper TeamDynamix External System

•    Grouper TeamDynamix Provisioner

• Need URL of Teamdynamix and BEID

• There are complexities with positive and negative inheritance for provisioning settings
• Jiras 
  • GRP-5258
  • fix TeamDynamix issues
    
    
  • GRP-5257
  • allow only certain attributes for search/match for TeamDynamix provisioner
    
    
  • GRP-5256
  • add TeamDynamix provisioner required and allowed attributes
    
    
  • GRP-5255
  • add TeamDynamix provisioner start with
    
    
  • GRP-5254
  • add TeamDynamix provisioner mock service for unit tests

Shilen

• Working on composites
• Diagnostic work
• Went thru API unit tests
• Adjusted those needing it 
• Looking at issue around multiple threads
• If you disable a composite group and re-enable, it doesn’t fix composite membership until run overnight
• Shilen will ensure the change log addresses that within a few seconds
• Shilen’s work will speed up work with composites
  
  
• Chris will work on disable/enable for SCIM

Chris 

• Chris and Emily are working on a Grouper blog for the January 2024 Trust and Identity Newsletter, with focus on Penn email provisioner use case 
• Chris worked on dynamic dropdowns 

•  Grouper custom template via GSH - V2 - dynamic drop downs
  
  

• Working on how Grouper Session is implemented
• AI Chris will document proper way to do sessions, using callbacks
  
  
• Speeding up start time
• Check groups in Grouper check config
• Will do query to see if group exists, if not , it creates the group
• There is also check attributes
• All being done as root
• There were some issues, Chris is addressing
•  
• Want to make this faster and handle registering
• With a local postgress 
•  
• Look at object types, start with folders and do check stems
• Use consistent API, Stem Save API
• New class: StemSaveBatch
• Move from a dozen queries to one query
• Faster start time is a goal
• Change Log Work or point in time work:  batching is helpful 
• Pattern of save class and save batch class is good
• AI Shilen will check on Changelog temp to changelog - there may be opportunities for batching 

Chad

• Build Grouper v5 container for Grouper Training Environment (GTE)
• Needed to add back apache and Shib SP, updated containers
• 5.7.0
• Worked on data fields
• Data fields for student information systems
• Issue around basis groups
• Created data dictionary
• Discussion around data field names and prefixes, and name uniqueness
• This uses Shib SP
  
  
• Chad also working on pac4j

Issue Roundup

Jiras in past two weeks

• GRP-5267
• Analyzing scripted loader when data fields are from import, ""grouperDataRowWrapper" is null"
  
  
• GRP-5266
• Scripted group editor has link to Data field dictionary; opens in same window so loses editing
  
  
• GRP-5265
• Data field dictionary needs examples for all types, not just entity.hasAttribute
  
  
• GRP-5264
• No UI hints how to get data from a data field provider
  
  
• GRP-5263
• Can't run scripted group job from loader config, "Cant find grouper loader type of group: <groupName>"
  
  
• GRP-5262
• Add data provider query, subject source id should be drop down
  
  
• GRP-5261
• updates to scim email 2 not happening
  
  
• GRP-5260
• upper case email attribute doesnt work
  
  
• GRP-5259
• SCIM manage "active" status instead of deprovisioning users
  
  
• GRP-5258
• fix TeamDynamix issues
  
  
• GRP-5257
• allow only certain attributes for search/match for TeamDynamix provisioner
  
  
• GRP-5256
• add TeamDynamix provisioner required and allowed attributes
  
  
• GRP-5255
• add TeamDynamix provisioner start with
  
  
• GRP-5254
• add TeamDynamix provisioner mock service for unit tests
  
  
• GRP-5253
• allow gsh template v2 form element decoration to know if the template is new or submitted or neither
  
  
• GRP-5252
• gsh template input decoration in v2 should have an event input id
  
  
• GRP-5251
• endless loop on gsh template dynamic dropdowns
  
  
• GRP-5250
• Grouper startup checking external dbs should skip disabled ones
  
  
• GRP-5249
• json recursion error on memory bean
  
  
• GRP-5248
• add progress bar on visualization (with no timeouts)
  
  
• GRP-5246
• Tomcat rewrite valve should be opt-in or have a way to opt out
  
  
• GRP-5245
• add negative assertions to gsh template v2 tests
  
  
• GRP-5244
• gsh v2 tests escapes html in part of the exception
  
  
• GRP-5243
• gsh template v2 tests do not check output if there are validation errors
  
  
• GRP-5242
• gsh templates v2 should support 

Grouper wiki updates in past two weeks

• Provisioner to mark as provisionable and use in GSH change log consumer

• Grouper TeamDynamix External System

• Grouper TeamDynamix Provisioner

• JavaDoc and Project Reports

• v5 Release Notes

• v4 Release Notes

•  Grouper custom template via GSH - V2 - dynamic drop downs

• Grouper local entities

Grouper Emails recently   - none

Next Grouper Call: Wed, Jan. 31, 2024