Penn upgrade notes from 2.3 to 2.4

Disconnect and reconnect to VPN (to not get hit by 10 hour timeout)

Backup the previous app files

[appadmin@fasttest-mgmt-01 grouper]$ mkdir -p ~/appFiles/apps/penngroups/v2.4upgrade/grouper
[appadmin@fasttest-mgmt-01 grouper]$ cp -R /opt/appserv/tomcat/apps/grouper/webapps/grouper/* ~/appFiles/apps/penngroups/v2.4upgrade/grouper
[appadmin@fasttest-mgmt-01 webapps]$ mkdir -p ~/appFiles/apps/penngroups/v2.4upgrade/grouperWs
[appadmin@fasttest-mgmt-01 webapps]$ cp -R /opt/appserv/tomcat/apps/grouperWs/webapps/grouperWs/* ~/appFiles/apps/penngroups/v2.4upgrade/grouperWs
[appadmin@fasttest-mgmt-01 loader]$ mkdir -p ~/appFiles/apps/penngroups/v2.4upgrade/loader
[appadmin@fasttest-mgmt-01 loader]$ cp -R /opt/appserv/tomcat/apps/grouperWs/loader/* ~/appFiles/apps/penngroups/v2.4upgrade/loader

Backup configs to CVS

For all three

[mchyzer@fasttest-mgmt-01 classes]$ cd /opt/appserv/tomcat/apps/grouper/webapps/grouper/WEB-INF/classes
[mchyzer@fasttest-mgmt-01 classes]$ cd /opt/appserv/tomcat/apps/grouperWs/webapps/grouperWs/WEB-INF/classes
[mchyzer@fasttest-mgmt-01 classes]$ cd /opt/appserv/tomcat/apps/grouperWs/loader/classes

cvs.groovy commit grouper.cache.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit grouper.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit grouper.client.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit grouper.hibernate.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit grouper-loader.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit grouper-ui.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit sources.xml pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit log4j.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit subject.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt
cvs.groovy commit grouper-ws.properties pre2_4upgrade --server-path=sysadmin/servers/clusterng/testMgmt

Turn off envs (loader, WS, UI)

Turn on WS as readonly

[appadmin@flash2 classes]$ pwd
/opt/appserv/tomcat_3b/webapps/grouperWs/WEB-INF/classes
[appadmin@flash2 classes]$ emacs grouper.properties

# set the API as readonly (e.g. during upgrades). Any updates will throw an exception
grouper.api.readonly = true

copy to nodes
[appadmin@fastprod-mgmt-01 classes]$ clusterCopy.sh grouperWs grouper.properties
bounce the ws

test the WS

read success
[mchyzer@flash pennGroupsClient-test-2.0.0]$ java -jar grouperClient.jar --operation=getMembersWs --groupNames=test:testGroup --debug=true

write failure
[mchyzer@flash pennGroupsClient-test-2.0.0]$ java -jar grouperClient.jar --operation=addMemberWs --groupName=test:testGroup --subjectIdentifiers=mchyzer --debug=true

Run change log to change log temp

./gsh
grouperSession = GrouperSession.startRootSession();
edu.internet2.middleware.grouper.GrouperSession: 5754482603ea4f3db46079e64430c165,'GrouperSystem','application'
gsh 1% loaderRunOneJob("CHANGE_LOG_changeLogTempToChangeLog");

Have DBA perform a backup on that schema

Upgrade java / tomcat

[appadmin@fasttest-mgmt-01 ~]$ cd /opt/appserv/common/conf
[appadmin@fasttest-mgmt-01 conf]$ clusterTomcat grouperWs stop

[mchyzer@fasttest-mgmt-01 conf]$ cvs.groovy commit tomcats.properties grouper2.4upgrade
[mchyzer@fasttest-mgmt-01 conf]$ cvs.groovy commit applications.properties grouper2.4upgrade

javaType6.name = java8_181
javaType6.location = /opt/appserv/common/java8_181
javaType6.version = 1.8.0_181

tomcatType7.name = tomcat8_5_35
tomcatType7.location = /opt/appserv/common/tomcat8_5_35base
tomcatType7.version = 8_5_35


tomcat47.typeName = tomcat8_5_35
tomcat47.javaType = java8_181

[mchyzer@fasttest-mgmt-01 init.d]$ pwd
/opt/appserv/tomcat/apps/grouper/init.d
[mchyzer@fasttest-mgmt-01 init.d]$ cvs.groovy commit tomcat_grouper pre2.4upgrade --server-path=sysadmin/servers/clusterng/testMgmt --binary-commit=false --commit-checkout-path=/

export JAVA_OPTS="-server -Xms5M -Xmx500M -Dfile.encoding=UTF-8"

export TOMCAT_HOME="/opt/appserv/common/tomcat8_5_35base"
export CATALINA_HOME="/opt/appserv/common/tomcat8_5_35base"

[appadmin@fasttest-mgmt-01 grouper]$ clusterRun grouper "ln -s /opt/appserv/common/java8_181 /opt/appserv/tomcat/apps/grouper/java"

[appadmin@fasttest-mgmt-01 conf]$ emacs server.xml

Change ports

Add in this to server.xml <Connector

scheme="https" secure="true"
[appadmin@fasttest-mgmt-01 conf]$ chmod +r *

Upgrade sources.xml to subject.properties

See if all sources.xml are the same

[appadmin@fasttest-mgmt-01 grouperWs]$ diff /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/sources.xml /opt/appserv/tomcat/apps/grouperWs/loader/classes/sources.xml
[appadmin@fasttest-mgmt-01 grouperWs]$
[appadmin@fasttest-mgmt-01 grouperWs]$ diff /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/sources.xml /opt/appserv/local/tomcat/letters/tomcat_3b/webapps/grouperWs/WEB-INF/classes/sources.xml
[appadmin@fasttest-mgmt-01 grouperWs]$

Upgrade sources.xml

[appadmin@fasttest-mgmt-01 installer]$ /opt/appserv/tomcat/apps/grouper/java/bin/java -jar grouperInstaller.jar
Non-fatal ERROR: you should have the environment variable JAVA_HOME set to a 1.7+ JDK (currently not set)
Non-fatal ERROR: java command in the PATH requires to be invoked with Java 1.7+ JDK (not JRE), but was: 1.6
Press <enter> to continue...
Do you want to 'install' a new installation of grouper, 'upgrade' an existing installation,
  'patch' an existing installation, 'admin' utilities, or 'createPatch' for Grouper developers
  (enter: 'install', 'upgrade', 'patch', 'admin', 'createPatch' or blank for the default) [install]: admin
What admin action do you want to do (manage, upgradeTask, develop)? : upgradeTask
What upgrade task do you want to do (convertEhcacheXmlToProperties, convertSourcesXmlToProperties, analyzeAndFixJars)? : convertSourcesXmlToProperties
Note, you need to convert the sources.xml file for each Grouper runtime, e.g. loader, WS, UI.
Note, to use subject sources from subject.properties, you need to be running Grouper 2.3.0+ with API patch 40 installed.
Enter the location of the sources.xml file: /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/sources.xml
Enter the location of the subject.properties file [/opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/subject.properties]:
File was written: /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/subject.properties
You should archive your sources.xml and remove it from your project since it is now unused:
  /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/sources.xml
[appadmin@fasttest-mgmt-01 installer]$

Store in CVS and copy around

[mchyzer@fasttest-mgmt-01 classes]$ cd /opt/appserv/tomcat/apps/grouper/webapps/grouper/WEB-INF/classes
[mchyzer@fasttest-mgmt-01 classes]$ cvs.groovy commit subject.properties 2.4upgrade --force=true

[appadmin@fasttest-mgmt-01 installer]$ rm /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/sources.xml
[appadmin@fasttest-mgmt-01 installer]$ rm /opt/appserv/local/tomcat/letters/tomcat_3b/webapps/grouperWs/WEB-INF/classes/sources.xml
[appadmin@fasttest-mgmt-01 installer]$ rm /opt/appserv/tomcat/apps/grouperWs/loader/classes/sources.xml
[appadmin@fasttest-mgmt-01 installer]$ cp /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/subject.properties /opt/appserv/local/tomcat/letters/tomcat_3b/webapps/grouperWs/WEB-INF/classes
[appadmin@fasttest-mgmt-01 installer]$ cp /opt/appserv/local/tomcat/letters/tomcat_2v/webapps/grouper/WEB-INF/classes/subject.properties /opt/appserv/tomcat/apps/grouperWs/loader/classes

[appadmin@fasttest-mgmt-01 installer]$ sync_common.sh grouper
[appadmin@fasttest-mgmt-01 installer]$ sync_common.sh grouperWs

Run the upgrader on the UI

[appadmin@fasttest-mgmt-01 installer]$ export JAVA_HOME=/opt/appserv/tomcat/apps/grouper/java
[appadmin@fasttest-mgmt-01 installer]$ export PATH=$JAVA_HOME/bin:$PATH
[appadmin@fasttest-mgmt-01 installer]$ /opt/appserv/tomcat/apps/grouper/java/bin/java -jar grouperInstaller.jar
  (enter: 'install', 'upgrade', 'patch', 'admin', 'createPatch' or blank for the default) [install]: upgrade

What do you want to upgrade? api, ui, ws, pspng, or psp? [API]: ui

Where is the grouper UI installed? /opt/appserv/tomcat/apps/grouper/webapps/grouper

What is the location of your tomcat server.xml for the UI? Note, if you dont use tomcat just leave it blank or type 'blank':
/opt/appserv/tomcat/apps/grouper/conf/server.xml

Is it ok to run a script that copies change log temp records to the change log (recommended) (t|f)? [t]: f

Revert all patches: t

Convert ehcache to grouper.cache.properties: t

Force install the GSH patch

Note, it will run this DDL, check before running:

[appadmin@fasttest-mgmt-01 grouper]$ more ./WEB-INF/ddlScripts/grouperDdl_20181214_17_35_11_536.sql
CREATE TABLE grouper_config
(
    id VARCHAR2(40) NOT NULL,
    config_file_name VARCHAR2(100) NOT NULL,
    config_key VARCHAR2(400) NOT NULL,
    config_value VARCHAR2(4000),
    config_comment VARCHAR2(4000),
    config_file_hierarchy VARCHAR2(50) NOT NULL,
    config_encrypted VARCHAR2(1) NOT NULL,
    config_sequence NUMBER(38) NOT NULL,
    config_version_index NUMBER(38),
    last_updated NUMBER(38) NOT NULL,
    hibernate_version_number NUMBER(38) NOT NULL,
    PRIMARY KEY (id)
);

CREATE INDEX grpconfig_config_file_idx ON grouper_config (config_file_name, last_updated);

CREATE INDEX grpconfig_config_key_idx ON grouper_config (config_key, config_file_name);

CREATE INDEX grpconfig_last_updated_idx ON grouper_config (last_updated);

CREATE UNIQUE INDEX grpconfig_unique_idx ON grouper_config (config_file_name, config_file_hierarchy, config_key, config_sequence);

CREATE INDEX member_subjidentifier0_idx ON GROUPER_MEMBERS (SUBJECT_IDENTIFIER0);

CREATE INDEX pit_member_subjidentifier0_idx ON GROUPER_PIT_MEMBERS (SUBJECT_IDENTIFIER0);

update grouper_ddl set db_version = 31, last_updated = '2018/12/14 17:35:11',
history = '2018/12/14 17:35:11: upgrade Grouper from V30 to V31, 2016/04/22 13:54:10: upgrade Grouper from V29 to V30, 2016/04/22 13
:53:58: upgrade Grouper from V28 to V29, 2016/04/22 13:52:45: upgrade Grouper from V27 to V28, 2016/04/22 13:52:33: upgrade Grouper
from V26 to V27, 2016/04/21 18:25:33: upgrade Grouper from V25 to V26, 2016/04/21 18:25:15: upgrade Grouper from V24 to V25, 2016/04
/21 18:24:58: upgrade Grouper from V23 to V24, 2016/04/21 18:24:42: upgrade Grouper from V22 to V23, 2016/04/21 18:24:16: upgrade Gr
ouper from V21 to V22, 2016/04/21 18:24:09: upgrade Grouper from V20 to V21, 2016/04/21 18:24:02: upgrade Grouper from V19 to V20, 2
016/04/21 18:23:55: upgrade Grouper from V18 to V19, 2016/04/21 18:23:49: upgrade Grouper from V17 to V18, 2016/04/21 18:23:42: upgr
ade Grouper from V16 to V17, 2016/04/21 18:23:36: upgrade Grouper from V15 to V16, 2016/04/21 18:23:21: upgrade Grouper from V14 to
V15, 2016/04/21 18:23:16: upgrade Grouper from V13 to V14, 2016/04/21 18:23:10: upgrade Grouper from V12 to V13, 2016/04/21 18:23:04
: upgrade Grouper from V11 to V12, 2016/04/21 18:22:58: upgrade Grouper from V10 to V11, 2016/04/21 18:22:52: upgrade Grouper from V
9 to V10, 2016/04/21 18:22:46: upgrade Grouper from V8 to V9, 2016/04/21 18:22:40: upgrade Grouper from V7 to V8, 2016/04/21 18:22:3
3: upgrade Grouper from V6 to V7, 2016/04/21 18:22:27: upgrade Grouper from V5 to V6, 2016/04/21 18:22:21: upgrade Grouper from V4 t
o V5, 2016/04/21 18:22:15: upgrade Grouper from V3 to V4, 2016/04/21 18:22:09: upgrade Grouper from V2 to V3, 2016/04/21 18:22:03: u
pgrade Grouper from V1 to V2, 2016/04/21 18:21:57: upgrade Grouper from V0 to V1, 2016/04/18 14:26:57: upgrade Grouper from V23 to V
24, 2016/04/18 14:26:29: upgrade Grouper from V22 to V23, 2016/04/18 14:25:53: upgrade Grouper from V21 to V22, 2016/04/18 14:25:50:
upgrade Grouper from V20 to V21, 2016/04/18 14:25:47: upgrade Grouper from V19 to V20, 2016/04/18 14:25:43: upgrade Grouper from V1
8 to V19, 2016/04/18 14:25:38: upgrade Grouper from V17 to V18, 2016/04/18 14:25:33: upgrade Grouper from V16 to V17, 2016/03/19 16:
43:16: upgrade Grouper from V15 to V16, 2016/03/19 16:43:10: upgrade Grouper from V14 to V15, 2016/03/19 16:43:06: upgrade Grouper f
rom V13 to V14, 2016/03/19 16:43:02: upgrade Grouper from V12 to V13, 2016/03/19 16:42:59: upgrade Grouper from V11 to V12, 2016/03/
19 16:42:54: upgrade Grouper from V10 to V11, 2016/03/19 16:42:49: upgrade Grouper from V9 to V10, 2016/03/19 16:42:44: upgrade Grou
per from V8 to V9, 2016/03/19 16:42:39: upgrade Grouper from V7 to V8, 2016/03/19 16:42:34: upgrade Grouper from V6 to V7, 2016/03/1
9 16:42:28: upgrade Grouper from V5 to V6, 2016/03/19 16:42:23: upgrade Grouper from V4 to V5, 2016/03/19 16:42:18: upgrade Grouper
from V3 to V4, 2016/03/19 16:42:13: upgrade Grouper from V2 to V3, 2016/03/19 16:42:07: upgrade Grouper from V1 to V2, 2016/03/19 16
:42:02: upgrade Grouper from V0 to V1, 2016/03/19 13:23:00: upgrade Grouper from V15 to V16, 2016/03/19 13:22:45: upgrade Grouper fr
om V14 to V15, 2016/03/19 13:22:40: upgrade Grouper from V13 to V14, 2016/03/19 13:22:35: upgrade Grouper from V12 to V13, 2016/03/1
9 13:22:30: upgrade Grouper from V11 to V12, 2016/03/19 13:22:25: upgrade Grouper from V10 to V11, 2016/03/19 13:22:20: upgrade Grou
per from V9 to V10, 2016/03/19 13:22:15: upgrade Grouper from V8 to V9, 2016/03/19 13:22:09: upgrade Grouper from V7 to V8, 2016/03/
19 13:22:04: upgrade Grouper from V6 to V7, 2016/03/19 13:21:59: upgrade Grouper from V5 to V6, 2016/03/19 13:21:53: upgrade Grouper
from V4 to V5, 2016/03/19 13:21:48: upgrade Grouper from V3 to V4, 2016/03/19 13:21:42: upgrade Grouper from V2 to V3, 2016/03/19 1
3:21:36: upgrade Grouper from V1 to V2, 2016/03/19 13:21:30: upgrade Grouper from V0 to V1, 2012/07/09 01:37:40: upgrade Grouper fro
m V25 to V26, 2011/09/30 21:56:39: upgrade Grouper from V24 to V25, 2011/02/25 01:02:09: upgrade Grouper from V23 to V24, 2010/07/09
19:52:04: upgrade Grouper from V22 to V23, 2010...' where object_name = 'Grouper';
commit;

[appadmin@fasttest-mgmt-01 grouper]$

Add this to the bottom of all the grouper.properties

###################################
## Deprovisioning
###################################

# comma separated affiliations for deprovisioning e.g. employee, student, etc
# these need to be alphanumeric suitable for properties keys for further config or for group extensions
deprovisioning.affiliations = employee

Put the new UI in place

[appadmin@fasttest-mgmt-01 tomcat_2v]$ pwd
/opt/appserv/local/tomcat/letters/tomcat_2v
[appadmin@fasttest-mgmt-01 tomcat_2v]$ clusterCopy.sh grouper webapps
[appadmin@fasttest-mgmt-01 tomcat_2v]$ clusterTomcat grouper start

Upgrade the WS

[appadmin@fasttest-mgmt-01 tomcat_2v]$ cd ~/appFiles/apps/penngroups/v2.4upgrade/installer/
[appadmin@fasttest-mgmt-01 installer]$ export JAVA_HOME=/opt/appserv/tomcat/apps/grouper/java
[appadmin@fasttest-mgmt-01 installer]$ export PATH=$JAVA_HOME/bin:$PATH
[appadmin@fasttest-mgmt-01 installer]$ /opt/appserv/tomcat/apps/grouper/java/bin/java -jar grouperInstaller.jar

  (enter: 'install', 'upgrade', 'patch', 'admin', 'createPatch' or blank for the default) [install]: upgrade

Where is the grouper WS installed? /opt/appserv/tomcat/apps/grouperWs/webapps/grouperWs

Is it ok to run a script that copies change log temp records to the change log (recommended) (t|f)? [t]: f

Force install the GSH and readme patch

[appadmin@fasttest-mgmt-01 tomcat_3b]$ cd /opt/appserv/local/tomcat/letters/tomcat_3b/
[appadmin@fasttest-mgmt-01 tomcat_3b]$ clusterCopy.sh grouperWs webapps/

make not readonly in grouper.properties

start tomcat

clusterTomcat grouperWs restart

Get new client, test it

[mchyzer@flash grouper]$ wget https://software.internet2.edu/grouper/release/2.4.0/grouper.clientBinary-2.4.0.tar.gz

[mchyzer@flash pennGroupsClient-test-2.4.0]$ emacs grouper.client.properties
[mchyzer@flash pennGroupsClient-test-2.4.0]$ java -jar grouperClient.jar --operation=addMemberWs --groupName=test:testGroup --subjectIdentifiers=convery
[mchyzer@flash pennGroupsClient-test-2.4.0]$ java -jar grouperClient.jar --operation=deleteMemberWs --groupName=test:testGroup --subjectIdentifiers=convery

test old clients

[mchyzer@flash pennGroupsClient-test-2.3.0]$ java -jar grouperClient.jar --operation=addMemberWs --groupName=test:testGroup --subjectIdentifiers=convery
[mchyzer@flash pennGroupsClient-test-2.2.0]$ java -jar grouperClient.jar --operation=addMemberWs --groupName=test:testGroup --subjectIdentifiers=convery

Upgrade the loader

[appadmin@fasttest-mgmt-01 installer]$ export JAVA_HOME=/opt/appserv/tomcat/apps/grouper/java
[appadmin@fasttest-mgmt-01 installer]$ export PATH=$JAVA_HOME/bin:$PATH
[appadmin@fasttest-mgmt-01 installer]$ /opt/appserv/tomcat/apps/grouper/java/bin/java -jar grouperInstaller.jar

/opt/appserv/tomcat/apps/grouperWs/loader/

upgrade

pspng

[appadmin@fasttest-mgmt-01 grouperWs]$ pwd
/opt/appserv/tomcat/apps/grouperWs
[appadmin@fasttest-mgmt-01 grouperWs]$ clusterCopy.sh grouperWs loader

[appadmin@fasttest-mgmt-01 grouperLoader]$ pwd
/opt/appserv/common/grouperLoader
[appadmin@fasttest-mgmt-01 grouperLoader]$ emacs grouperLoader.sh

JAVA_HOME should be grouperWs

export JAVA_HOME=/opt/appserv/tomcat/apps/grouperWs/java

[appadmin@fasttest-mgmt-01 grouperLoader]$ sync_common.sh grouperWs

Start the loader

[appadmin@fasttest-mgmt-01 installer]$ clusterRun grouperWs '/sbin/service grouperLoader restart'

We need the Lite UI (not admin UI), for the people pickers

[appadmin@fasttest-mgmt-01 installer]$ pwd
/home/appadmin/appFiles/apps/penngroups/v2.4upgrade/installer
[appadmin@fasttest-mgmt-01 installer]$ wget https://software.internet2.edu/grouper/release/2.4.0/grouper-legacy-ui.tar.gz
[appadmin@fasttest-mgmt-01 installer]$ gzip -d grouper-legacy-ui.tar.gz
[appadmin@fasttest-mgmt-01 installer]$ mkdir grouper-legacy-ui
[appadmin@fasttest-mgmt-01 installer]$ cd grouper-legacy-ui/
[appadmin@fasttest-mgmt-01 grouper-legacy-ui]$ tar xvf ../grouper-legacy-ui.tar

[appadmin@fasttest-mgmt-01 grouper-legacy-ui]$


Backup the UI

[appadmin@fasttest-mgmt-01 v2.4upgrade]$ mkdir grouperAfterUpgrade
[appadmin@fasttest-mgmt-01 v2.4upgrade]$ cp -R /opt/appserv/tomcat/apps/grouper/webapps/grouper/* grouperAfterUpgrade

Copy necessary files to the UI


Put this in Owasp.CsrfGuard.overlay.properties

org.owasp.csrfguard.unprotected.GrouperHome=%servletContext%/home.do

org.owasp.csrfguard.unprotected.GrouperExternal=%servletContext%/grouperExternal/index.html
org.owasp.csrfguard.unprotected.GrouperExternalAppHtml=%servletContext%/grouperExternal/appHtml/*

org.owasp.csrfguard.unprotected.GrouperExternalPublicNetworkGraph=%servletContext%/grouperExternal/public/networkGraph/*

org.owasp.csrfguard.unprotected.GrouperUi=%servletContext%/grouperUi/
org.owasp.csrfguard.unprotected.GrouperUiIndex=%servletContext%/grouperUi/index.html
org.owasp.csrfguard.unprotected.GrouperUiAppHtml=%servletContext%/grouperUi/appHtml/*
org.owasp.csrfguard.unprotected.GrouperI2mi=%servletContext%/i2mi/*
org.owasp.csrfguard.unprotected.GrouperScripts=%servletContext%/scripts/*

[appadmin@fasttest-mgmt-01 classes]$ emacs Owasp.CsrfGuard.overlay.properties
[appadmin@fasttest-mgmt-01 classes]$ clusterCopy.sh grouper Owasp.CsrfGuard.overlay.properties
[appadmin@fasttest-mgmt-01 classes]$ clusterCopy.sh grouper ../lib/grouper-legacy-ui.jar

########## DO THIS FOR GROUPER AND GROUPER-WS

[appadmin@fasttest-mgmt-01 lib]$ pwd
/opt/appserv/tomcat/apps/grouper/webapps/grouper/WEB-INF/lib
[appadmin@fasttest-mgmt-01 lib]$ cp ~/appFiles/apps/penngroups/v2.4upgrade/grouper/WEB-INF/lib/proxyWrapper.jar .

add to web.xml

  <filter>
    <filter-name>proxyWrapper</filter-name>
    <filter-class>edu.upenn.isc.proxyWrapper.ProxyWrapperFilter</filter-class>
  </filter>
  <filter-mapping>
    <filter-name>proxyWrapper</filter-name>
    <url-pattern>/*</url-pattern>
  </filter-mapping>

The struts JSPs are still there, these can be deleted. If you dont delete them they cant be called anyways since the java and web.xml mapping is not there. Note, if you arent using the lite UI and you upgraded, you can delete WEB-INF/grouperUi too. (NOT grouperUi2)
```
[appadmin@fasttest-mgmt-01 conf]$ cd /opt/appserv/tomcat/apps/grouper/webapps/grouper

[appadmin@fasttest-mgmt-01 grouper]$ rm -rf WEB-INF/jsp
[appadmin@fasttest-mgmt-01 grouper]$ clusterCopy.sh grouper WEB-INF
```

Analyze tables again

select 'ANALYZE TABLE ' || table_name || ' estimate STATISTICS sample 100000 rows;' as script from user_Tables where table_name like 'GROUPER%'

e.g. ANALYZE TABLE GROUPER_ATTRIBUTES estimate STATISTICS sample 100000 rows;

Turn off readonly offsite WS, upgrade it

Simlar instructions to read/write WS
Compile invalid views if views use the grouper views
Test including eforms and secure space

Page tree

Penn upgrade notes from 2.3 to 2.4