unresolvable error on auditing fields

 

----Original Message----
From: Andrew Morgan morgan@orst.edu
Sent: Tuesday, July 24, 2018 2:50 PM
To: Hyzer, Chris <mchyzer@isc.upenn.edu>
Cc: grouper-users@internet2.edu
Subject: RE: [grouper-users] Error: "Cant find creator of ..."

 

Aha, the error message was misleading!  Here is more of the stack trace:

 

2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu : org : is : app : box : temp eligible

edu.internet2.middleware.subject.SubjectNotFoundException: No results: searchSubject filter:(uid=%TERM%) searchValue: hagimotk

         at edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapUnique(LdapSourceAdapter.java:811)

         at edu.internet2.middleware.subject.provider.LdapSourceAdapter.getSubject(LdapSourceAdapter.java:375)

         at edu.internet2.middleware.grouper.subj.SourcesXmlResolver.find(SourcesXmlResolver.java:309)

         at edu.internet2.middleware.grouper.subj.CachingResolver.find(CachingResolver.java:143)

         at edu.internet2.middleware.grouper.subj.ValidatingResolver.find(ValidatingResolver.java:105)

         at edu.internet2.middleware.grouper.SubjectFinder.findByIdAndSource(SubjectFinder.java:504)

         at edu.internet2.middleware.grouper.Group.getModifySubject(Group.java:3690)

         at edu.internet2.middleware.grouper.grouperUi.beans.api.GuiObjectBase.getLastUpdatedByGuiSubject(GuiObjectBase.java:196)

...

 

So it was actually failing to resolve the subject that last modified the

group.  Digging in with SQL shows:

 

 

SQL> select name, creator_id, MODIFIER_ID from grouper_groups where id = 'd32649c748ec4cb19e489b0ab5656f8f';

 

NAME

----------------------------------------------------------------------------------------------------------------------------------

CREATOR_ID                               MODIFIER_ID

---------------------------------------- ----------------------------------------

osu:org:is:app:box:temp-eligible

02c44e5a77fb4dbf81ce38515e9deed7         d8adf0aa82df489a9c3fe011d8734081

 

SQL> select subject_id from grouper_members where id = '02c44e5a77fb4dbf81ce38515e9deed7';

 

SUBJECT_ID

----------------------------------------------------------------------------------------------------------------------------------

lomaxe

 

SQL> select subject_id from grouper_members where id = 'd8adf0aa82df489a9c3fe011d8734081';

 

SUBJECT_ID

----------------------------------------------------------------------------------------------------------------------------------

hagimotk

 

 

I understand now why I'm seeing this error.  As one of our former Grouper

admins, hagimotk will be the modifier for many groups.

 

What are the options for dealing with this?  Find all occurrences and

"fix" them?  Stop removing subjects from the subject source? 

 

It would be nice if the error message did not mislead me by using

"creator" in its wording.

 

Thanks,

                Andy

 

On Tue, 24 Jul 2018, Hyzer, Chris wrote:

 

> Can you select the row from grouper_groups and see if the auditing member ids (creator_id, modifier_id) are still the old user (they should still have a row in grouper_members by

> "id").  If you want to open a bug with that info we can fix that for you

> 

> Thanks

> Chris

> 

> ----Original Message----

> From: grouper-users-request@internet2.edu [grouper-users-request@internet2.edu] On Behalf Of Andrew Morgan

> Sent: Monday, July 23, 2018 2:28 PM

> To: grouper-users@internet2.edu

> Subject: [grouper-users] Error: "Cant find creator of ..."

> 

> One of our Grouper admins left the university a while ago, and we recently

> deleted her account from LDAP as part of our account lifecycle.  We

> removed her Grouper memberships, but she had direct privileges on a few

> groups.  I ran the USDU to remove those as well.

> 

> Even after running USDU, I'm seeing this curious error message in the UI

> log when I view the Members or Privileges tab of specific group:

> 

> 2018-07-23 11:19:54,612  WARN api.GuiObjectBase:  Cant find creator of:osu : org : is : app : box : temp eligible

> edu.internet2.middleware.subject.SubjectNotFoundException: No results: searchSubject filter:(uid=%TERM%) searchValue: <username-redacted>

> 

> 

> However, when I view "More" in the UI for the group, it says:

> 

> Creator:            Lomax, Erica (lomaxe)

> 

> 

> (lomaxe is still a valid account, not the person that left).

> 

> Where is the "creator" in the error message coming from?

> 

> Thanks,

> Andy Morgan

> Systems Administrator, Identity & Access Management

> Information Services | Oregon State University

>