Attending:
- Chris Hyzer, Penn, Chair
- Shilen Patel, Duke
- Vivek Sachdiva, independent
- Emily Eisbruch, Internet2
New Action Items from this call
[AI Chris] Gribonvald maria db instructions, put somewhere on wiki
[AI Chris] remove PSP link from downloads page
[AI Chris] CC field in jira
[AI Chris] Duo pagination
[AI Chris] subject caching jiras
[AI Chris] Passing db connection details in env vars
[AI Bert] Gettes email on 2/6 about looping and error pspng
[AI Chris] respond to Wanda Zeng email 2/6
[AI Chris] go through slack and update issue roundup
Issue roundup
[AI Chris] Duo pagination
[AI Chris] subject filtering bug - Shilen did a commit to master, Chris will review and make a patch
Visualization released - some users have kicked the tires which is great, please review it on the demo server
TIER packaging on Grouper downloads page - Emily updated the wiki page to encourage use of Docker containers
(Shilen ) Query slow on GrouperDaemonDeleteMultipleCorruption
One massive query
Suggestion for 7 small queries
Shilen will work on this for Grouper 2.4
CAS filter on grouper 2.4, Bert what’s the status on this?
[AI Chris] remove PSP link from downloads page
[AI Chris] CC field in jira
[AI Chris] make jira about expressions in LDAP loader (e.g. time > sysdate) (Haverkamp)
If someone has EL expressions then evaluate it
Then dynamic filters
[AI Chris] subject caching jiras
Michael G using this and it works now.
If only one on a box, hopefully no file contention issues
Some errors that Chris will look at
Grouper loader of another type
Handling of another type, perhaps type web service
Not great to call command line from java
Suggestion Use ETL into a database
Loader input that ‘s a web service
Look at 2 halves of loader , getting data and syncing data
A lot of logic w sql and ldap being so different
Rabbitmq routing was released
Michael G tried this and said it worked
Thanks Vivek for this work,
Group membership search results
Patch released in past 2 weeks
No feedback yet
Chris hopes to get all the patches released at Penn and hopes to provide feedback
Attestation no email if no members (is that what we want? Suggested by Matt)
ChrisH thinks might still want email even if no members
Shilen: Duke has yearly attestation on automated groups
[AI Chris] Passing db connection details in env vars
Config overlays fixed , but Michael G says might still be some issues
[AI Chris] Gribonvald maria db instructions, put somewhere on wiki
Need to find right place
[AI Bert] Gettes email on 2/6 about looping and error pspng
[AI Chris] respond to Wanda Zeng email 2/6
[AI Chris] go through slack and update issue roundup
Current work tasks, and next tasks
Vivek – USDU
Subject deletion utility,
Backend all done
Attributes / daemon
Attributes on members, deletes them
Working on UI
Duke uses USDU every day, if someone not resolvable , remove memberships and privileges.
Not sure if attributes are removed on member
Don’t change what happens/ logic for USDU
Some institutions make you unresolvable when you are not active anymore
Request for a delay and more settings and insight
Chris – Visualization, working on bugs
- Obliterate Stem - Chris will do a patch
- Training Update: Grouper may be at end of the schedule for planned ITAP (Internet2 Trust Access Platform) training. This will likely be training using an LMS
Bert – PSPNG patches
Shilen – Membership changes, instrumentation
Patch for advanced membership UI - [AI] Chris will look at this
Patch for PSPNG triggered from UI
Is that a full sync overall? Think so
Commit for member subject caching
Did not look at source, Chris suggests looking at memberships, could be hard to find,
Shilen created a test case
It failed at first
Instrumentation
Next is instrumentation, should be trivial, Shilen hopes to complete this next week
Default now is off, may not work anymore since discovery does not have cert
Suggestions to default to ON
Concept of a test for a release candidate for canary build
Idea is that once Chris Hubing makes a package, then the package would stay in same state until instrumentation shows a few institutions are using the build, then Canary flag removed
We may want to collect more data on Grouper deployments moving forward
Tag means all patches up to that level
If an org is not using the containerized version, it’s hard to know where people stand on patches deployed
Most orgs install all patches rather than pick and choose
UI page for folders to show memberships
Look at folder overall can be helpful
Attest folders, so don’t have to go to every single group
With attestation, 2 options for notifications, can notify admins or notify an email list. Can have 100 people and don’t want all to get the attestation email
Chad working on Grouper UI visualization https://spaces.at.internet2.edu/x/Nwd0C
Grouper at Global Summit 2019 - March 5-8, 2019 in DC
- Grouper BOF at Global Summit March 6 , noon to 1pm
- Marquis Ballroom Salon 9
- https://meetings.internet2.edu/2019-global-summit/detail/10005392/
Next Scheduled Grouper Call: Wed March 6, 2019
- This is during Global Summit,
- we may try to have a Zoom call if Chris can set it up so team members can hear the session to whatever extent possible.