Grouper Call of Nov. 9, 2022

Attending 

• Chris Hyzer, Penn, Chair
• Shilen Patel, Duke
• Vivek Sachdiva, independent  
• Chad Redmon, UNC
• Carey Black, Purdue
•   Chris Hubing, Internet2
• Emily Eisbruch, Internet2

New Action Items

• AI Chris and Vivek will work on the Jar/ Config file issues around Grouper External Systems.  Make it one jar, push up to superclasses
  

 Administrivia

•  Internet2 Intellectual Property Policy
  
• Review AIs  Grouper Project Action Items (Google Doc)
  
•  Agenda Bash
  

Current Projects

Vivek

• Worked on JIRAs, including
  
• GRP-4380 provisioning membership value should get from cache? or make attributes work
  
• GRP-4455
  if there are previous wizard configs, but not currently available, delete them on save
  
• GRP-4456 implement checkboxes on config editor so multiple configs can be deleted
  
• GRP-4255 DNE does not work when readonly provisioning for entities that do not exist in target
  
• GRP-4449 add logging for azure throttling
  
• Now working on Grouper External Systems
  
•    Chris B. on Slack, wanted a provisioner , and we are responding to that, with messaging, using model of how we implement provisioners in Grouper, eventually could have a start with
  
•   Q:  is also for Java classes , with subclassing? A: Those will go in the example too..
  
•    Comment: yet another file,  it won’t be read as a config. It will specify for wizards, it’s metadata about config,  need Java classes, need to inject Jar and Config file,  (should end in .containerfile)
  AI Chris and Vivek will work on the Jar/ Config file issues around Grouper External Systems.  Make it one jar, push up to superclasses
  

Shilen 

• Working on provisioning
  
• Updating disallowed columns
  

Chris

• Chad and Chris working on Grouper Training.  Coming up Nov 15-18, 2022 
  
•   Re recording the pre work videos and re recording them
  
•   Much has changed in Grouper UI in past few years
  
•   Chad updated the data in the Grouper Training Environment about a year ago
  
•   Using LDAP sync
  
•    List of groups loader
  
  
  
  
• For next version of Grouper 
  
•  https://spaces.at.internet2.edu/display/Grouper/Grouper+Product+Roadmap
  
• Upgrade Java, TomEE to Tomcat, For TechEx, make progress on ABAC, branch to Grouper 2.7
  
• Make new tables that are specified on wiki
  
• POC on how to do ABAC loader going from data fields
  
• Several kinds of data fields. 
  
• Identifiers
  
• Grouper data field and subject source next generation
  
• Concept of a data row
  
• Configure in a wizard
  
• Something like provisioning attributes
  
• Dictionary table
  
• Use of foreign keys can be helpful to reduce chance of data corruption
  
• POC needs something implemented
  
• In Grouper 2.7 focus will be adding column to some existing tables
  
• There will be another loader in the daemon
  
• Comment from Matt: this is good, have been waiting for this
  
• Midpoint is good example of where data is coming from
  
• Provisioning into Grouper is not a good way to explain, could be loading or caching in Grouper
  
• How will subject source API be replaced?
  
• Members table, thinking of entries as group, or something from the data field side
  
• Shilen: Can Grouper be pushed to from somewhere else?
  
• Chris Hyzer: yes
  
• Chad: database size? This is a mini data warehouse
  
• Concern about calling this JEXL scripted groups -  too narrow, use “expression language”
  

Chad

• Chad and Chris will discuss SCIM error
  

Issue Roundup 

Jiras in past two weeks

• 
  GRP-4471
  provide an example of max membership in group
  
  
  
  
• 
  GRP-4470
  check columns of tables that need a default value for cases where they are null and set to default in ddl
  
  
  
  
• 
  GRP-4469
  midpoint provisioner metadata example
  
  
  
  
• 
  GRP-4468
  allow setting the idIndex of groups in UI if not conflict and below current index
  
  
  
  
• 
  GRP-4467
  Add property for GrouperLoaderLog jobs not to log at DEBUG
  
  
  
  
• 
  GRP-4466
  Syncing sync memberships updates sync members
  
  
  
  
• 
  GRP-4465
  Subject identifier shouldn't be cleared from member sync table until member isn't in target
  
  
  
  
• 
  GRP-4464
  document an example to update a group idIndex
  
  
  
  
• 
  GRP-4463
  clarify for LDAP external systems that a single node and not VIP should be specified
  
  
  
  
• 
  GRP-4462
  legacy oidc screen should be removed
  
  
  
  
• 
  GRP-4461
  allow site specific external systems, start withs, configurations, provisioners, etc
  
  
  
  
• 
  GRP-4460
  pit daemon should insert into change log temp instead of change log
  
  
  
  
• 
  GRP-4459
  allow enabled/disabled dates without time components
  
  
  
  
• 
  GRP-4458
  enable partial full syncs in provisioner for large provisioners
  
  
  
  
• 
  GRP-4457
  midpoint provisioner
  
  
  
  
• 
  GRP-4456
  implement checkboxes on config editor so multiple configs can be deleted
  
  
  
  
• 
  GRP-4455
  if there are previous wizard configs, but not currently available, delete them on save
  
  
  
  
• 
  GRP-4454
  remove jersey jar from container
  
  
  
  
• 
  GRP-4453
  conflicting jar with jersey... fix in installer
  
  
  
  
• 
  GRP-4452
  change jenkinsfile to not hard code java version
  
  
  
  
• 
  GRP-4451
  daemon job for reports gives error "Error: can't find daemon config for jobName grouper_report_c39b4..."
  
  
  
  
• 
  GRP-4450
  Provisioner metadata is readonly unless "can change" is true
  
  
  
  
• 
  GRP-4449
  add logging for azure throttling
  
  
  
  
• 
  GRP-4448
  do not remove default attribute in ldap before adding values
  
  
  
  
• 
  GRP-4447
  null pointer on incremental ldap
  
  
  
  
• 
  GRP-4446
  sql provisioner has errors with lots of data
  
  
  
  
• 
  GRP-4445
  SQL subject source sho
  

Grouper Emails in past two weeks

• [grouper-users] Cant find attribute: grouperLoaderDisplayNameSyncType but grouperLoaderType is SQL_SIMPLE, Francesco Malvezzi, 11/07/2022
  
• <Possible follow-up(s)>
  
• [grouper-users] Cant find attribute: grouperLoaderDisplayNameSyncType but grouperLoaderType is SQL_SIMPLE, Francesco Malvezzi, 11/07/2022
  
• SEEMS THIS GOT RESOLVED
  

Grouper wiki updates in past two weeks

• Grouper provisioning glossary
  
• Grouper daemon "other job" GSH script to make sure group membership is no longer than a year
  
• Logging SQL queries in Grouper
  
• OIDC authentication to Grouper UI
  
• Penn Grouper upgrade testing plan
  
• Grouper - Loader
  
• OIDC authentication to Grouper UI
  
• v2.6 Release Notes
  
• GrouperShell (gsh) Group insert / update / delete (GroupSave)
  
• Grouper provisioning framework remaining items
  
• Grouper MidPoint provisioner
  
• Release steps for new container build
  
• v2.6 Upgrade Instructions from v2.6
  
• Penn email list provisioner
  
• Grouper TIER SCIM server
  
• SCIM server rewrite to not depend on J2EE
  

Next Grouper Call : Wed. Nov 30, 2022 (this is an off week call as Nov 23 is cancelled)