Child pages
  • Grouper Call 4-May-2016
Skip to end of metadata
Go to start of metadata


Notes: Grouper Call Wed. 4-May-2016 


 Chris Hyzer, Penn (Chair)

Shilen Patel, Duke

Bert Bee-Lindgren, Georgia Tech


Grouper Roadmap:


Action Item Review

[AI] (Bert) document PSP NG install process and the hybrid ant/maven approach.

May be altered by the info here for a way to use Maven without ant:

Working on it:

End goal: PSPNG jars in dist/lib and the pspng-specific dependencies in lib (tar.gz with dist/lib/*.jar and lib/*.jar)


[AI] (Chris) Document new web services [pending]

[AI]: [Chris] continue to go through commits going back to 2.2 and make sure they are in Master , Chris has done a lot but not all, it’s on release steps page.  [pending]

[AI]: [Bert] Get notes and ideas into Jira on automated integration-testing environment .Will work on this with Bill Thompson. Will target the next Grouper 2.3 patch [done, GRP-1293]

[AI] (Bert) create a Jira for documenting how PSP NG can work with either messages or changelog, including taking advantage of the automatic listener setup . [Dup, GRP-1294]

[AI] (Misagh) look add hibernate-c3p0 jar to gradle/maven, and the upgrade to c3p0 (commit from Chris) [needed for Grouper 2.3]  - Chris did it for Maven, still work to do for Gradle [Done enough]

[AI] (Chris) capture the TIER packaging direction in a Grouper wiki page, including environment variable strategy [not done, needed for 2.3] - partly done [done]

[AI] (Chris) make patching and upgrading work on a source directory (based on input from packaging survey) [after Grouper 2.3  release] [pending]

[AI] ( Chris) create JIRA for look on Grouper wiki for Java doc links and change them to  [probably obsolete. Reevaluate after migration to new i2 github]   [done, jira created]

[AI] (Bert) create PSPNG Training Video (after necessary patches) -- Camtasia

[AI] (Bert) investigate camtasia licensing at GT. Grouper-training wiki has details on how to do the videos.

[AI] (shilen) create a jira for Mysql


Grouper 2.3 Observations

  • New UI - Removing a group member seems to take a long time, doesn’t take a long time on other UI

    • Could it be a rule [Chris doesn’t think so]

  • Clearly PSPNG has to be packaged

  • Tests that were failing in MySql

    • Shilen: What is happening seems strange

    • Multiple threads with loader process

      • One thread: inserts a new member object

      • Another thread: Adds another member object for that same person

      • Sometime later (post-save) when looking for composite changes, member objects are sought and not found!

    • Transaction:

      • Objects are in EM (but not committed to database)

      • But objects are not being found in database

      • Perhaps missing a flush()

    • Possible fix:

      • Try to avoid joining member object again

      • But doesn’t address underlying problem

Conditional Memberships

  • Composite (intersection) group so that all of GroupA’s members have to also be in GroupB

  • Rule: Remove from one group can remove from another group

  • Larger conditions make this easier

Grouper BOF at 2016 Global Summit

Wed May 18 at noon ET


 Issue roundup

- members table filtering (Shilen is this resolved?)

- grouper db views (documented by BillR)

- grouper WS build issues fixed

- extra grouper installer instructions (not done yet)

[Identify the netid, change sources.xml]

 Shilen: Could take a long time to do the upgrade

 [AI] (Chris) Add a note that says “Do this after the upgrade” to identify the netid

- patch for deadlock works

- sql debug flag [fixed]

- psp build issue fixed

- obliterate stem patch [One step, easier to use]

- folder privilege wording patch [done]

- unix file permissions on webprod3

 Any umask change? No

 Put a umask into bashrc or profile

 [AI] (Chris) Update bashrc with umask

- grouper loader to create empty groups

 2.1-2.2 upgrade: Noted in the upgrade steps (run bad-membership finder)

 Today, chris has a non-unique-index on the table

 [AI] (Chris) Chris will read Shilen email that gave Chris a slightly different query to see if there were any nulls

 The sync-pit script has a duplicate check that might help

- unique index on pit group set (how to fix)

- builtin etc stem (TODO for chris)

 [AI] (Chris) Change to use etc stem

- release schedule

 Grouper: Chris thinks that we should do Yearly releases (with earlier completion, obviously)

 TIER: If TIER does 6mos release, we can repackage patches, etc to make a 2.3.1 to make maven easier

 Development projects would benefit from having maven-central have up to date jars

 Should we be publishing snapshots? Shilen wouldn’t mind depending on 2.3.1-SNAPSHOT

- attribute assignments from db view [views exist]

- chrome and confluence [fixed]

- grouper client ldap search scope [U CO expected to submit PR]

- classnot found pspng

- struts vulnerability

- web services and basic auth [No colons in basic-auth username]



 Grouper BOF at 2016 Global Summit

Wed May 18 at noon ET - 1pm ET

  • [AI] Chris will talk with Emily

  • Bert will be attending

  • Week following: Chris will be in NY with Bill Thompson

  • [AI] [Bert] Slides on PSPNG

    • High level

    • Current state

    • Numbers, if available

    • 2.3 patches

    • 2.4 plans

    • Discussion/Questions/Feedback

 Global Summit 2016

TIER Working Group and Developers Meeting to be held

May 19, 2016 , 9am - 12:30pm in Chicago

IAM Online Webinar on Grouper

Wed. July 17 2016 at 2pm ET

What’s new with the Grouper 2.3 Release --

GA Tech Door Control System Use Case

Next Grouper Call: Wed. May 4, 2016 at noon ET


  • No labels