Grouper Call 26 July-2017
Attending:
- Chris Hyzer, Penn, Chair
- Bert Bee-Lindgren, Georgia Tech
- Jim Fox, University of Washington
- Shilen Patel, Duke
- Emily Eisbruch, Internet2
Action Items
[AI] (Bert) large number of changes and provisioning
[AI] (Chris)Messaging waiting on tests advice
[AI] (Bert) Respond to David Churchly about PSPNG escaping
[AI] (Chris) Grouper on SQL server (should we change docs or not support anymore?)
[AI] (Chris) UI customizations from Carey
[AI] (Chris) Extend CSS (add list of files), don't see the equivalent for JS (we can do that)
[AI] (Carey) send Chris specific example of hook based on attribute and menu to add that attribute?
[AI] (Shilen) look at Scott Koranda issue of occasional failure of loader job with include/exclude. Should we have a fixer script for this?
[AI] (Shilen) Grouper upgrade does not see stems
[AI] (Chris) Display cron schedule on loader list
[AI] (Chris) Attestation bug and feature request
[AI] (Chris) UI bug with repeated “type”
[AI] (Chris) Timeout for LDAP loader default (10 seconds)? Why silent failure?
[AI] (Bert) create wiki page with proposal for addressing GRP-1533 on commas
[AI] (Chris) ask Misagh about Grouper and github and build process; it tries to autobuild the repo and is failing (Next step is to remove the gibhub build process or just the SCIM portion? Chris will do more follow up)
https://spaces.at.internet2.edu/display/Grouper/Grouper+Wiki+Issues
Remaining issue is around improving doc on UI customization approach moving forward
[AI] (Chris) GRP-1489 pull request (DONE, Chris will email)
[AI] (Chris) edit LDAP loader in UI fails when legacy group type doesn’t exist (DONE, Chris will email)
[AI] (Chris) reply to Brigitte about MyServices in newUI and mask branches
[AI] (Chris) WS LDAP authentication
[AI] (Chris) remove privileges from groups (Akki Kumar)
[AI] (Bert) survey Grouper list on ldaptive /VTLDAP config strings issue [Email done, responses received, need to summarize into wiki]
[AI] (Chris) to look at PSPNG status page to see if patch works
[AI (Bert) document the findings somewhere on wiki on Grouper and openldap for large groups
[AI] (Bert) reply to Chris Sutherin UMBC on pspng examples [Bert to reply]
[AI] (Bert) reply to Scott Koranda about massaging group names in provisioning
[AI] (Bert) reply to Shaun K about name null in pspng
[AI] (Bert) to reply to Peter St Onge
[AI] (Bert) Jeffrey Crawford email 1/12, full sync missing members
[AI] (Bert) Scott Koranda email 1/12, error on change log consumer psp
[AI] (Bert) email the list about (a small) Office365 versus Dropbox and next PSP project
[AI] (Bert) create PSP-NG Training Video (after necessary patches) using Camtasia
Completed Action Items
[AI] (Chris) PageSize and PageNumber to getMemberships (DONE)
[AI] (Carey) send Chris the FROM and TO of changes he made (DONE)
[AI] (Carey) provide specific info on pages on Grouper wiki that need updating (DONE, thanks Carey! )
DISCUSSION
1. Administrivia
Intellectual Property Notice:
• http://www.internet2.edu/membership/ip.html
2. Current work tasks
Vivek – Messaging strategies
see on wiki: Grouper Messaging System
• Move pspng to messaging?
• Issue with ack’ing and rabbitmq and activemq
• Messaging is similar to change log but you can selectively ack
• Do we need a mode where we say we will ack it?
• Can get 20 messages at a time (AWS lowest common denominator), should we look at adjusting that?
• https://spaces.at.internet2.edu/display/Grouper/Grouper+messaging+send+receive+change+log+adapter+example
• Next step for Vivek would be to write a WS listener to translate messages to rest. Can have a reply to and a UUID. We can do a design doc
Chris –patches, attestation, deprovisioning
• Hope to have deprovisioning patch by next Grouper call
Bert – PSPNG
• DN and filter escaping work, will have patch
• NYU use case
◦ Patch 13 worked for some situations , but not for all (issues around bushy)
◦ Patch 14 will fix that
• Multiple group object classes
Shilen –GSH-NG
see on wiki: Improve GSH
• Backspace, because of term? Able to reproduce
• If run groovysh natively then it doesn’t happen
• Jline version that is shipped natively is an older version, the older version doesn’t have that problem
• Ship with the older version? Yes
• Chris will test the patch
Issue roundup
Resourcing Grouper project
• Adding another ½ provisioning person
• Add a UI person
• Add someone to respond to questions on the email lists
AI for chris] UI customizations from Carey
Grouper installer proxy (jira)
BoF at 2017 TechEx in SF - Tuesday afternoon
• Sunday morning Grouper Tutorial - Bert and another GA Tech person will attend
Differencing tool to compare users (jira)
Edit loader in UI fails if group type not there (fixed in patch)
GRP-1582: SQL_GROUP_LIST diagnostics generic message when group query fails
TIER packaging and Grouper
• Suggest that Grouper package runs in several separate Docker containers: UI in one, Web Services in one, etc.
• Run GSH script to create the TIER Grouper Deployment Guide structure for you.
• Chris suggests that should be folded into the tar
Sources.xml editor UI wizard
UI sessions and removing users from the allowed UI group
Database performance discussion around person registry and UUID and TIER (SteveZ interested in this issue)
[AI for Bert] large number of changes and provisioning
Attribute value maximum length
Grouper on SQL server (should we change docs or not support anymore?) [AI for chris]
• Works on small deployments, but performance is poor on larger deployments
GRP-1568: active PIT objects not found should be handled gracefully (status?)
AI for Chris] Messaging waiting on tests advice
[AI for Bert] Respond to David Churchly about PSPNG escaping
Grouper loader ldap question and answer
GSHNG feedback and discussion
Grouper at 2017 TechEx:
• Grouper in Action Tutorial (separate registration required)
• Sunday Oct. 15, 2017, 8am to noon
• https://meetings.internet2.edu/2017-technology-exchange/detail/10004782/
Grouper BOF - likely time is Tuesday afternoon, 3:50pm to 4:40pm (not finalized yet)
Grouper Team: please save Thursday afternoon Oct. 19, 2017 for TIER Working Group Members and Developers F2F
Next Grouper Call: Wed. Aug. 9 at noon ET