Provisioner case sensitive compare wants to change value only differing in case

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Minor
    • 4.14.0, 5.11.0
    • Affects Version/s: None
    • Component/s: provisioning
    • None

      A groupOfNames provisioner, values for ldap_dn and cn are set for case sensitive compare=false. Testing an initial provisioning run for a Grouper group "case_sensitive2", which should be matching an existing LDAP group "CASE_SENSITIVE2". The matching succeeds, but it still wants to update the CN to match the Grouper case. It also wants to update the DN, but this has no effect in LDAP.

      Note: The existing LDAP group had no members, so adding the membership also shows up under the ldap mods.

       

      2024-02-07 23:42:51.565: Provisioner 'xxx' (v2mo131w) state 'retrieveIndividualTargetMemberships' type 'fullProvisionFull': {state=retrieveIndividualMembershipsIfNeeded, linkGcSyncEntitiesUpdated=1, retrieveTargetMembershipsMillis=0}
      ...
      (v2mo131w): 0. Group(matchingAttrs: LinkedHashSet(1): [0]: [ldap_dn, val: cn=CASE_SENSITIVE2,ou=Groups,dc=example,dc=edu, compareVal: cn=case_sensitive2,ou=groups,dc=example,dc=edu, currentValue: true], attr[cn]: "CASE_SENSITIVE2", attr[ldap_dn]: "cn=CASE_SENSITIVE2,ou=Groups,dc=example,dc=edu", attr[member]: HashSet(1): [0]: , attr[objectClass]: HashSet(2): [0]: top, [1]: groupOfNames)
       
      ...
       
      2024-02-07 23:42:51.566: Provisioner 'xxx' (v2mo131w) state 'compareTargetObjects' type 'fullProvisionFull': {state=compareTargetObjects, provisioningMembershipWrappersWithNoMatch=1, groupUpdatesAfterCompare=2}
      ...
      (v2mo131w): 0. Group(matchingAttrs: LinkedHashSet(1): [0]: [ldap_dn, val: cn=case_sensitive2,ou=Groups,dc=example,dc=edu, compareVal: cn=case_sensitive2,ou=groups,dc=example,dc=edu, currentValue: true], attr[cn]: "case_sensitive2", attr[ldap_dn]: "cn=case_sensitive2,ou=Groups,dc=example,dc=edu", attr[member]: TreeSet(1): [0]: uid=800000000,ou=People,dc=example,dc=edu, attr[objectClass]: LinkedHashSet(2): [0]: top, [1]: groupOfNames, upd cn "CASE_SENSITIVE2" -> "case_sensitive2", upd ldap_dn "cn=CASE_SENSITIVE2,ou=Groups,dc=example,dc=edu" -> "cn=case_sensitive2,ou=Groups,dc=example,dc=edu", ins member "uid=800000000,ou=People,dc=example,dc=edu", del member "", recalcObject: true, recalcMships: true, selectProcessed: true)
       
      ...
      2024-02-07 23:42:51.57: v2mo131w, xxx, fullProvisionFull: INFO: Command log for provisioner 'xxx' - 'v2mo131w', updateGroup: Ldaptive modifyRequest (ucbLdap): [org.ldaptive.ModifyRequest@552734613::modifyDn=cn=case_sensitive2,ou=Groups,dc=example,dc=edu, attrMods=[[org.ldaptive.AttributeModification@441571526::attrMod=REMOVE, attribute=[cn[CASE_SENSITIVE2]]], [org.ldaptive.AttributeModification@1489644585::attrMod=ADD, attribute=[cn[case_sensitive2]]], [org.ldaptive.AttributeModification@1002284252::attrMod=REMOVE, attribute=[member[]]], [org.ldaptive.AttributeModification@184781465::attrMod=ADD, attribute=[member[uid=800000000,ou=People,dc=example,dc=edu]]]], controls=null, referralHandler=null, intermediateResponseHandlers=null]
      Ldaptive modifyResponse (ucbLdap): [org.ldaptive.Response@528544983::result=null, resultCode=SUCCESS, message=null, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1]
       
      
      

            Assignee:
            Shilen Patel
            Reporter:
            Chad Redman
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: