Attending 

  • Chris Hyzer, Penn, Chair
  • Chad Redmon, UNC
  • Vivek Sachdiva, independent  
  • JJ, Unicon
  • Drew Aschenbrener, Internet2
  • Emily Eisbruch, Internet2

DISCUSSION

  • Agenda bash

  

New Action Items


 


 InCommon Base CAMP, June 2022

Chad presented one hour talk, same as last year, basics of access management , whey you don’t want individual lists, you want groups, hierarchies,  went thru a demo, same demo as   the GTE   Grouper Training Environment. 

Chris talked on Grouper Provisioning Framework .  Same example as in the recent movie.

Issue Roundup 


Vivek

  • Worked on adding Daemon control options to the log screen
  • Drop down added to daemon logs view to perform various operations
  • Grouper provisioning, related to Azure
  • Discussions w Jeff from UNC 
  • LDAP provisioning: there is a test case where entities not making it to LDAP target, Vivek is looking into that

 

Chad

  • Will update 2 wiki page 
  •  how to customize the UI page and External subjects page
  • Current doc is lite UI specific

  • Chad also needs to update Quickstart? Wiki page
  • Grouper / Misc/ test data
  • We can remove the quickstart directory at this point  


Chris

  • Taking a few days off
  • Team please attend to Grouper Slack

  • Provisioning
  • Looking at matching and search attributes 
  • Config for database cache fields
  • Would be helpful to be able to cache entire representation of target
  • Code to take target representation, put into JSON, if it fits in the field that is good, or if not it abbreviates 
  • Part that needs work, is to hook up with the screen
  • Option for “entire object”
  • In translation of each attribute, instead of marshaling it from a certain bucket, get it from the cached object, (target cached object or Grouper cached object)
  • Can now cache DN or UUID, but it would be better to cache the whole object
  • For additional comparisons 
  • In search and matching, for full sync, it gets all data, it will try to match based on matching attribute, then tries the 2nd matching attribute, if it can’t find anything, it will see if attribute is cached, if it is , it will use the cached value and find deletes, subject attributes that change, etc.
  • On incremental or recalc, it will do same thing on search
  • The search DOA says find this group , find this entity, use this search attribute and use this value
  • Chris changed the SQL DOA and the LDAP DOA. we need to change the other DOAs 
  • Some DOAs can only search by certain things
  • We need to put some validation around this
  • With the changes, the engine should be more reliable
  • Chris had long call w Liam and folks at Penn State around provisioning issues
  • Thanks to everyone testing
  • We need to do some tuning and put out notifications
  • We are going in the right direction
  • Hope to get 2.6? out
  •  
  • LIAM’s issue  where subject identifier changes


JJ

  • Would appreciate new Grouper 2.5 version
  • AI Chad will look at new Grouper 2.5 version for JJ / Unicon
  •   Follow Release steps on the wiki 
  •   https://spaces.at.internet2.edu/display/Grouper/Release+steps
  • Chad will improve release steps wiki as needed

  • JJ finished OSGI work for Grouper 2.6.10
  • There is a pull request,
  • Shut down is not included
  • So there will be another pull request
  • Not much time for OSGI starting, plug ins can take time
  • Need to shut down at end of every test

  • Verified SAML OIDC basic JOT, all working in 2.6, CAS not working due to JAVA 9 in code, need to fix that or upgrade JAVA.  JJ will tell folks using CAS that they must use SAML
  • AI JJ will make a wiki about UNICON dev environment, and running a UI from a MAVEN command  


  • Working on authentication


Drew

  • Working on provisioning framework, around entitlements, and entities
  • Template for application structures, using GSH templates
  • We had a different architecture for templates
  • There are examples of GSH templates for application structures
  • Existing application template is close to what is needed, just missing one thing: different naming convention for objects to build for security
  • Chris: we could make a config for that and the template would work 
  •  Drew will work with  GSH template to address the current needs, or will make a jira if needed
  • Chad:  GSH templates are more flexible than previous legacy template approach


Jiras in past two weeks




Grouper Emails in past two weeks





Grouper wiki updates in past two weeks



Next Grouper Call: Wed July 6, 2022


  • No labels