Grouper Working Group Notes of Dec. 8, 2021

  Attending 

  • Chris Hyzer, Penn, Chair
  •  Shilen Patel, Duke
  • Chad Redmon, UNC
  • Emily Eisbruch, Internet2

 

 DISCUSSION

 

 

 Current Work

Chris 

  • Stem view performance 
  • Two tables: grouper last login and grouper stem privilege
  • When you do stem find it goes to DOA
  • secure stems
  • Query clause
  • Uses folder set tables
  • It takes too long
  • So, do half the calculation in advance 
  • Add new approach everywhere to make stems more secure
  • There is the ability to  sort a list of stems
  • User Full sync and incremental sync to keep up
  • Experience:
  • Computing the privileges for a Grouper folder takes milliseconds
  • Computing for attributes can take 8 sec
  • For a wheel user or read only admin,  or a view only admin, it doesn't check
  • There is a group for power users who can view everything
  • Is there a way to disable this feature?
  • Yes the config
  • Default will be true
  • Need a folder view privilege?

  • Pull request on Shib library fixes
  • Grouper HTTP client, does logging of everything, was hard to specify around logging the body, added something around system properties

 

  • Grouper Release news: 
    • Grouper 2.65 should be announced today
    • There is a lot in that release
    • Another release may be needed soon

 

  • Chris needs to do something w Security level -1

 


Vivek  

  • SQL provisioner is done. 
  • There is interest in midpoint 

 

 

Shilen

  • Updated provisioner diagnostics
  • Works well with LDAP
  • Did JUNIT tests
  • Jira resolved for 2.65
  • Will work on the USDU changes

 

Chad

  • Delete members issue
  • Did Two fixes for group . replace members


  • Add or remove members issue

 

Grouper Training is scheduled for February 8-11, 2022

  • https://incommon.org/academy/grouper-school/
  • Prep for delivering this training should be less work than before because of new container and Better examples
  • With LMS students have trouble getting to slides
  • If copy paste has everything you need, it will help
  • Copying from slides is hard
  • Too much switching different windows
  • Take stuff out of slides?
  • Challenging to keep it all up to date

 

 

Issue Roundup 

 

Jiras in past 4 weeks

 

 

 

 

Grouper Emails in past 4 weeks

 

AI Chris respond to the Grouper emails  from 11/23 (grouper not connecting w external LDAP server) and 12/02 (OWASP_CSRF token issue)

 

 

Grouper wiki updates in past 4 weeks

 

 

  • No labels