Child pages
  • Grouper Call 27 Jan-2017
Skip to end of metadata
Go to start of metadata

  

Gr ouper Call Fri. Jan. 27, 2017 

Attending:  

Chris Hyzer, U. Penn

Shilen Patel, Duke

Bert  Bee Lindgren, Georgia Tech

Jim Fox, U. Washington

Emily Eisbruch, Internet2  

New Action Items    

[AI] (Chris) add TIER API to the Grouper download page and do testing

[AI] ( Chris) check member table to see if subject ID matches

[AI ] (Chris) add jira for rename admin UI to “old admin ui”

[AI] (Bert)  look at subject ID and subject Identifier terms and text on source diagnostics screen

 [AI] Shilen and Chris to follow-up on issues around threads

[AI] (Bert) email Bill T with feedback on the Grouper Deployment Guide 

[AI ] (Chris) GrouperSystem in another source

[AI] (Bert)  reply to Chris Sutherin UMBC on pspng examples

[AI] (Bert)  reply to Scott Koranda about massaging group names in provisioning

[AI] (Bert)  to ply to Shaun K about name null in pspng

[AI] (Bert) to reply to Peter St One

[AI ] (Chris) get Grouper working for mysql and postgres

[AI ] (Chris) look at outdated docs: https://bugs.internet2.edu/jira/browse/GRP-1466

[AI ] (Chris), making delete group more efficient for large groups, fix issue with not allowed to delete group (email tues 1/17)

[AI] (Bert) Jeffrey Crawford email 1/12, full sync missing members

[AI] (Bert) : Scott Koranda email 1/12, error on change log consumer psp

 

Carry Over Action Items  

[AI] (Bert) email the list about (a small) Office365 versus Dropbox and next PSP project

[AI] (All) review the   TIER Grouper deployment guide work

[AI] (Chris)  Attribute framework documentation DONE , see new diagrams!

[AI] (Bert) follow up and reply to email on Hibernate Connection Pool issue [Done, use Java-Properties or we’ll have to code something new]

[AI] (Bert) document how to build PSP NG and patch it  [Bert needs to finish last couple steps] (AI for Chris to try it afterwards)  [Done, Bert’s updated the doc]

[AI] (Chris/Bert) put “make_patch” command in github  (Done) Bert will update the doc 

[AI] (Bert) Put these in jira: Grace Periods, Membership Rules, People/Account subjects   [AI] (Bert)  document the solution to “turn off old psp issue” that was raised on the list [AI] (Bert) create PSP-NG Training Video (after necessary patches) using Camtasia [AI] (Chris) make sure GrouperSystem cant exist in other sources for W

Completed Action Items   [AI] (Jim) provide info on University of Washington provisioning to Office 365 (DONE) [AI] (Chris)  GRP-1420: Member removal from group shows recent activity as GrouperSystem (DONE) [AI] (Chris) GRP-1418: removeMembers redirect to main page for non-wheel user with Admin priv (DONE) [AI] (Chris) follow up on Diagnostic servlet needs patch (DONE) [AI] (Chris) see if UI authn pulls from source.  I.e. if someone authenticated as GrouperSystem (DONE) [AI] (Chris) put example in properties file for sources.xml patch (DONE)

 

DISCUSSION

Current work tasks

Vivek – Accessibility, TIER packaging in installer

Vivek making great progress  

A few more items to do on accessibility

Vivek put TIER API in the installer (SCIM server that runs in TOM EE instead of Tomcat, needs different servlet container than the UI) would be good to get to one servlet container. Switch from Tomcat altogether? But we have a lot invested in Tomcat…

Grouper installer can install TOM EE now. 

[AI] (Chris) add TIER API to the Grouper download page and do testin  

Can Tomcat act as a reverse proxy (like Apache normally does in these environments)?

Not sure, but worth exploring.  

Misagh – gradle

Misagh does not have time allocated now to continue the gradle work.

So we may not go in the gradle direction

Chris Projects

 – subject API diagnostics ( https://spaces.internet2.edu/display/Grouper/Grouper+subject+API+diagnostics+in+UI ) , 

First step towards ADMIN console in the new UI

Will help configure subject sources

[AI] ( Chris) check member table to see if subject ID matches

Wiki for subject.properties

https://spaces.internet2.edu/display/Grouper/Grouper+sources.xml+conversion+to+subject.properties

[AI for chris add jira for rename admin UI to “old admin ui”]

[AI for Bert to look at subject ID and subject Identifier terms and text on source diagnostics screen]

Working on patches 

 Bert – PSPNG

  •   List was clear about not one-size-fits-all wrt/LdapGroups
  • Working with MRG on PSPNG at PSU
  • Tracking down problems with group deletion and group.name
  • Need to fix ucsc problem
  • Multi-objectclass ldap groups

 

Shilen – real time loader

Added test cases, noticed issues and made fixes, cleaned up doc. 

https://spaces.internet2.edu/display/Grouper/Grouper+loader+real+time+updates

Shilen will release patch for testing of real time loader

Need to look at unitest

Some issues around threads..

 [AI] Shilen and Chris to follow-up on issues around threads

Shilen to work next on instrumentation 

Another work area is messaging

 

Bill – TIER Grouper deployment guide

Chris put some comments in the doc

How should the team weigh in on the work being done?

 

Jim: nothing jumped out as being problematic. some of the technologies in the Grouper Deployment Guide are not familiar. (U Washington not currently using Docker.) Too specific in suggestions  on how to name things

 

Bert: content is there, but organization needs more work.  A new deployer might need easier view of the forest. Needs  “these are the things you need to do, this is what you need to know beforehand about source systems”  (Chris - the original Columbia Grouper guide was more like that, but more content was added and organization may have suffered)

The Shib Approach section could be confusing

[AI] (Bert) email Bill T with feedback on the Grouper Deployment Guide 

Shilen: A lot of info .  Perhaps organization could be improved. The content is OK.  Recommendations can be helpful for new users.  But would be good to show several ways to do things

Chris: The guide is trying to harmonize vocabulary and structures, names of folders. They may be identifying terms  and could be an issue with internationalization.  Many abbreviations: ref org app  . Suggestion to NOT abbreviate.  They need to emphasize one does not need to name things (folders) in the way recommended. Penn does not have a central APP folder (uses an org folder).

Emily: Introduction, put more of a plug to say Grouper is flexible, don’t have to follow hard fast rules about structures 

Internet2 Global Summit 2017 

sign up HERE for TIER F2F on Thursday, April 27 9am-noon 

(Global Summit ends Wed. Please stay through Thursday for TIER F2F)

Tentative time for Grouper BOF at 2017 Global Summit

  •   Tuesday April 25, 2017, Noon - 1pm ET

 Issue roundup

·          https://bugs.internet2.edu/jira/browse/GRP-1475   Delete loader job when group deleted

·          https://bugs.internet2.edu/jira/browse/GRP-1474   (AI for Chris make patch) LDAP pooling options

·          https://bugs.internet2.edu/jira/browse/GRP-1471   (patch done) AD range requests

·         Large groups from Gettes

·         Posix from Gettes

 ·          https://bugs.internet2.edu/jira/browse/GRP-1473   (patch done) more examples in subject.base.properties

·         Weird Berkeley issues can’t reproduce

 

·          https://bugs.internet2.edu/jira/browse/GRP-1472   (patch done) readonly wheel group cant see folders/groups in ui

 

·         Group Verification/Recertification Audit Trail -- Feature Request

 

·         Can’t delete a group

 

·         https://spaces.internet2.edu/display/Grouper/Grouper+subject+API+diagnostics+in+UI   (patch done) subject api diagnostics

 

·         Subfolder limits on ui

 

·         UNC contribution page https://spaces.internet2.edu/display/Grouper/University+of+North+Carolina+Grouper+Project+Page

 

·         UNC grouper load testing https://spaces.internet2.edu/display/Grouper/UNC+load+testing+grouper

 

·          https://bugs.internet2.edu/jira/browse/GRP-1468  (patch done) digester jar not working

 

·          https://bugs.internet2.edu/jira/browse/GRP-1463   (patch done) 

 

(AI for Chris) GrouperSystem in another source

 

·         AI for Bert reply to Chris Sutherin UMBC on pspng examples

 

·          AI for Bert reply to Scott Koranda about massaging group names in provisioning

 

·         Changing grouper_members table to change subject ids

 

·          AI for Bert to ply to Shaun K about name null in pspng

 

·         SSL on download site broken

 

·          https://spaces.internet2.edu/display/Grouper/Grouper+deprovisioning

 

·          AI for Bert to reply to Peter St Onge

 

·         AI for Chris get Grouper working for mysql and postgres

 

·         AI for Chris look at outdated docs: https://bugs.internet2.edu/jira/browse/GRP-1466

 

·         Note addition to roadmap to update training videos

 

·         Daily report SMTP

 

·         Grouper stats from community https://spaces.internet2.edu/x/YghhBg

·          AI for Chris, making delete group more efficient for large groups, fix issue with not allowed to delete group (email tues 1/17) 

·         GRP-1441: understanding diagnostic servlet output for loader jobs (fixed in patch 

·          https://bugs.internet2.edu/jira/browse/GRP-1418   (fixed in patch) non wheel redirect to main page on remove member

·          https://bugs.internet2.edu/jira/browse/GRP-1420   (fixed in patch) member removal shows recent activity as GrouperSystem

 

·          https://bugs.internet2.edu/jira/browse/GRP-1462   (fixed in patch) patch broke ability to delete group

·         Resolution on ldap groups that require a member? [Yes, we know what is needed]

·         Are docs updated on make_patch? [Done]

·         1461 clean logs fails?  (Done)

·          https://bugs.internet2.edu/jira/browse/GRP-1460   and groups doesnt work in loader

·         re-running maintenance tasks

·          https://bugs.internet2.edu/jira/browse/GRP-1459   improve daily report AI for chris

·          AI for Bert: Jeffrey Crawford email 1/12, full sync missing members

·         AI for Bert: Scott Koranda email 1/12, error on change log consumer psp

  

Next Grouper Call: Wed Feb. 8, noon ET

 




 

 

 

  • No labels