Grouper Call of Feb. 28, 2024


  • Chris Hyzer, Penn, Chair
  • Chad Redmond, Unicon
  • Vivek Sachdiva, independent
  • Shilen Patel, Duke
  • Carey Black, Purdue
    • Bert Bee Lindgren, GA Tec
    • Liam Hoekenga, UMich

    • Gail Lift, UMich
    • Kellen Murphy, Univ of Virginia

    • Ioannis Igoumenos, Athens Greece
    • Drew Aschenbrener, Internet2

    • Emily Eisbruch, Internet2


New Action Item from this call 

Grouper Doc

Grouper Training

Grouper Releases 

      • Two new Grouper releases are out. 
      • There’s a lot in these releases
      • Found memory issue with the provisioner, Thread local issue, there will be new standards for using thread locals
      • Ldaptive issues should be addressed in v5 latest release
      • Re-did how memberships and composites work
      •   Changelog temp runs continuously
      •    Adds sub job records so you can see the progress
      • SCIM changes
      • Unscheduling Daemon jobs has been improved Stopping daemon jobs
      • Restriction of deleting built in objects
      • AI - Chris - document provisioning group roles

      • AI - Shilen -  update wikis to include stop daemon info
    • Moving forward, we try to only change bugs in Grouper v4
    •   Chad and Chris discussed  issue around release updates,  Maven, Authentication plug-in does not push to the release, need to do snap shot builds. 

Grouper Release v5.8.1

We are proud to announce the release of Grouper v5.8.1.  There are two upgrade instructions from v5.7.1.  See the release notes:

30 Jiras

Current Work


    • Rules UI
    •  Shared demo on how to set up Grouper rules
    • Most users will pick a pattern
    • Patterns based on rules listed on the wiki
    • Can add more patterns later
    • You need to run GSH currently
    • Inherited privileges have their own UI
    •    Should that even be a pattern?
    • Everything that’s a rule can be shown as a pattern on the UI
    • Not everything is applicable for folders
    • Multiple type of firing for a rule
    •   Fires immediately
    •   Not fires immediately:
    •        change log consumer or 
    •        daemon
    •   Discussion of Start with versus Pattern terminology
    • For privileges on rules, we had to make decisions.. 
    • Must have create or admin on a folder to see rules
    • To edit rules you need admin on the folder, suggestion to change this to sysadmin
    • Chris will poll on the Grouper slack channel to get community preferences on default privileges
    • Question: could rules have bad consequences, such as the “remove” rule clearing out everything under a folder?
    •    AI Chris - add Rules UI to Grouper roadmap



    • For each rule pattern, going through the wiki and making updates
    • Need to update screenshots in the doc
    • Will be working on prep for upcoming Grouper Training
    • Daniel has a non snapshot ldaptive
    • Postgress was updated
    • Chris worked on various Jiras


    • Customer using legacy JDBC subject source
    • No value in JDBC1 versus JDBC2
    • Materialized view is a good idea
    • Starting with Grouper v7 or v8, hope to get the data in Grouper
    • Chad working on JIRAs
    • (case sensitivity) Chris will look at this
    •    GRP-5308 - Getting issue details... STATUS     Provisioning entities not filtering objectClass when Select All Entities is false

Matt: question re integration with Midpoint so Midpoint could deliver a data source like in infrastructure instead of subject source?

Chris: yes we will work on that.


Issue Round up

JIRAs in past 2 weeks


show better provisioning group counts


fix external auth build in v4 and v5


update postgres driver to 42.7.2


jwt does not work with


allow updating of group names in scim


Convert rules MAINTENANCE job to OTHER_JOB


Remove job MAINTENANCE_externalSubjCalcFields


if delete groups in provisioning is true (not default), and an option selected, then a validation occurs but shouldnt


look at performance of readonly queries


warning message for disabled dates too soon to work


table names for quartz should be adjusted for case sensitive mysql


Convert builtinMessagingDaemon MAINTENANCE job to OTHER_JOB


Convert cleanLogs MAINTENANCE job to OTHER_JOB


Convert enabledDisabled MAINTENANCE job to OTHER_JOB


error going to daemon screen


fix memory issue with provisioner


ablity to clone an existing GSH template into a new GSH template. ( copy template A into new template B)|


fix container certs for openshift

Wiki Updates in past 2 weeks

Grouper Users email list (none)

Next Grouper Call: Wed. March  13. 2024

  • No labels