Versions Compared

Old Version 11

changes.mady.by.user Emily Eisbruch (internet2.edu)

Saved on

compared with

New Version 12

changes.mady.by.user Chris Hyzer (upenn.edu)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

DateUpgrading from versionUpgrading to VersionNote for versionImportanceStep needed if...DescriptionJira
2020/10/20Allv2.5+2.5.36Not importantIf you want to make sure inherited privs get converted correctly

Either run the Upgrade Task daemon or let it run, then query for inherited privilege rules that arent owned by GrouperSystem, there should be none.   Use the application template, after that still should be none.

Expand


Code Block
select
	attribute_assign_id,
	assigned_to_stem_name,
	rule_check_type,
	rule_check_stem_scope,
	rule_then_enum_arg1,
	rule_act_as_subject_id,
	rule_act_as_subject_source_id
from
	grouper_rules_v
where
	rule_act_as_subject_id != 'GrouperSystem'
	and assigned_to_type = 'stem'
	and rule_check_type in ('attributeDefCreate' , 'stemCreate' , 'groupCreate')
	and rule_then_enum in ('assignAttributeDefPrivilegeToAttributeDefId' , 'assignStemPrivilegeToStemId' , 'assignGroupPrivilegeToGroupId')



GRP-2926

2020/10/20ALLv2.5.*2.5.36Medium importantIf your IdP timeout is not 10 hoursThe default tomee session timeout is now 10 hours instead of 30 minutes in the UI.  And 1 minute instead of 30 minutes in the WS.  Change this default in your UI to your IdP SSO length with container env var: GROUPER_TOMCAT_SESSION_TIMEOUT_MINUTES

GRP-2967

2020/10/20Allv2.5.*2.5.36ImportantIf you use GrouperLook at the startup logs for the container to make sure there are no errors, and make sure file customizations still work

GRP-2994

DateUpgrading from versionUpgrading to VersionNote for versionImportanceStep needed if...DescriptionJira
2020/09/16Allv2.5.*2.5.35ImportantIf you use GrouperDDL updates2020/09/16v2.4+v2.5.*2.5.35Medium importantIf you have configuration in the database

You will not see history for existing DB configs until you run the SQL in your DB, see jira


GRP-2947

2020/07/21Allv2.5.332.5.33ImportantIf you use GrouperDDL updates
2020/07/21v2.5.25+v2.5.*2.5.33Probably not importantIf you have a recent membership group configuredAfter upgrade, run the "Upgrade Tasks" daemon, or wait an hour.  If you have used "recent memberships" you will see the attributes moved from the source group to the target group.

GRP-2874

2020/07/21Allv2.5.*2.5.33ImportantIf you use LDAP and are interested in pool validationThis defaults to validate connections periodically instead of on checkout for performance reasons.  See Jira for details.  The default is now to check pool every 30 minutes, you probably want to set something lower.

GRP-2863

2020/07/21v2.5.*v2.5.*2.5.33Not importantIf you are expecting apache indexes to be on (previous default)Set the container env var to get previous behavior:
GROUPER_APACHE_DIRECTORY_INDEXES=true

GRP-2862

2020/07/21Allv2.5.*2.5.33Might be importantIf you are putting configs in the DB and want to import externalized text config to DB: grouper.text.en.us.propertiesImport that file to the DB and remove from container overlay or mount

GRP-2807

2020/07/21Allv2.5.*2.5.33ImportantIf you overlay the server.xml and not use ENV vars to configureYou need to make sure the ajp connector will work:
secretRequired="false" address="0.0.0.0" allowedRequestAttributesPattern=".*"

GRP-2851

2020/07/21v2.5.25+v2.5.*2.5.33ImportantIf your loader query or group_loader query in the group: 
etc:attribute:recentMemberships:grouperRecentMembershipsLoader
is not a simple select from a view		Delete that group, restart grouper (any service), see the group recreated with the correct query.  Make sure it is scheduled and run the loader job once.

GRP-2893

2020/05/13v2.5.*v2.5.*2.5.29Not importantIf you care about the log prefix of logs or need 
to revert to old behavior		-e GROUPER_LOG_PREFIX=grouper

Log prefix.  By default it is "grouper-ui' for ui-only container.  grouper-ws for ws-only.  grouper-scim for scim-only.  grouper-daemon for daemon-only.  Or "grouper" if not set to something else.

GRP-2772

2020/05/13v2.5.*v2.5.*2.5.29Not importantIf you use any of these env vars in your Dockerfile or container: RUN_APACHE, RUN_SHIB_SP, 
RUN_TOMEE, RUN_HSQLDB, SELF_SIGNED_CERT		Add prefix GROUPER_ to themGRP-2776
2020/05/13v2.5.*v2.5.*2.5.29ImportantIf you are overlaying or replacing text in files that can use new env vars, use thoseReview v2.5.28 changes on container documentation page.NA
DateUpgrading from versionUpgrading to VersionNote for versionImportanceStep needed if...DescriptionJira
2020/05/05v2.5.*v2.5.35v2.5.27ImportantIf you overlay the grouper.xml or grouper-www.conf, and not from the shell hook methodYou should patch these files correctly from the shell script hook

GRP-2749

2020/05/05Allv2.5.*v2.5.27ImportantIf you use GSH scriptsIf you have cron'ed GSH scripts or run GSH script manually, the error handling changed, which might affect how these complete.  See JiraGRP-2732
2020/05/05Allv2.5.*v2.5.27Not importantIf you have usdu or badMembership in your grouper-loader.properties configSome jobs were split out to have single purpose daemons, see Jira for details

GRP-2722

2020/05/05Allv2.5.*v2.5.27Not importantIf you use WS or UI diagnostics URL (/status) and do not want group names in diagnostics outputYou can report an abbreviated list for diagnostics if you like

GRP-2719

2020/05/05v2.4+ (container)v2.5.*v2.5.27ImportantIf you use /opt/grouper/lib directory in containerWe used to copy this directory to /opt/grouper/grouperWebapp/WEB-INF/lib, but no longer.  Mount or copy to the right place.  See Jira for details.

GRP-2740

2020/05/05v2.5.25+v2.5.*v2.5.27Not importantIf you dont want a temporary diagnostics errorYou might want to run the recent memberships loader job manually after upgrading so you don't get diagnostics errors of a daemon that hasn't run

GRP-2723

2020/04/21Allv2.5.*v2.5.23Probably not importantIf you have dbUrl in subject.propertiesDatabase connections in grouper are configured in grouper-loader.properties, move it there.  See Jira for details

GRP-2679

2020/04/21Allv2.5.*v2.5.23Probably not importantIf you use vt-ldapIf you know that you use the vt-ldap interface, or if you search your configs for "vt", follow the instructions in the Jira.  Only ldaptive is supported now.

GRP-2696

2020/04/21Allv2.5.*v2.5.23ImportantIf you have morph string secret configured in external file from morphString.properties

encrypt.key = /some/path/morph.secret		Carefully inspect your morphString.properties and see if there is a newline in your secret file path: /some/path/morph.secret
If so, then set this in morphString.properties

encrypt.trimWhitespaceFromMorphSecretFile = false

GRP-2687

2020/04/21Allv2.5.*v2.5.23Not importantIf you configured the workflow scheduleSearch for "workfow" in grouper-loader.properties, change to "workflow"

GRP-2689

2020/04/21Allv2.5.*v2.5.23Not importantIf you use grouper jars outside of containerYou can remove base properties files in classpath

GRP-2683

2020/04/08v2.4v2.5.*v2.5.22

Upgrade instructions from v2.4 to v2.5

...