Changes between Version 3 and Version 4 of GrouperInstall


Ignore:
Timestamp:
06/02/13 09:01:18 (13 years ago)
Author:
uaguest_SPatel1@…
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • GrouperInstall

    v3 v4  
    249249   a) Delete the entire source element with the id ''jdbc''. 
    250250 
    251    b) Add source element for LDAP. 
     251   b) Add source element for LDAP.  Be sure to update the password. 
     252 
     253{{{ 
     254  <source adapterClass="edu.internet2.middleware.grouper.subj.GrouperJndiSourceAdapter"> 
     255    <id>ldap</id> 
     256    <name>Alaska Person Source</name> 
     257    <type>person</type> 
     258    <init-param> 
     259      <param-name>INITIAL_CONTEXT_FACTORY</param-name> 
     260      <param-value>com.sun.jndi.ldap.LdapCtxFactory</param-value> 
     261    </init-param> 
     262    <init-param> 
     263      <param-name>PROVIDER_URL</param-name> 
     264      <param-value>ldaps://edir.alaska.edu:636</param-value> 
     265    </init-param> 
     266    <init-param> 
     267      <param-name>SECURITY_AUTHENTICATION</param-name> 
     268      <param-value>simple</param-value> 
     269    </init-param> 
     270    <init-param> 
     271      <param-name>SECURITY_PRINCIPAL</param-name> 
     272      <param-value>uid=grouper03,ou=resource,dc=alaska,dc=edu</param-value> 
     273    </init-param> 
     274    <init-param> 
     275      <param-name>SECURITY_CREDENTIALS</param-name> 
     276      <param-value>secret</param-value> 
     277    </init-param> 
     278     <init-param> 
     279      <param-name>SubjectID_AttributeType</param-name> 
     280      <param-value>BannerID</param-value> 
     281    </init-param> 
     282     <init-param> 
     283      <param-name>SubjectID_formatToLowerCase</param-name> 
     284      <param-value>false</param-value> 
     285    </init-param> 
     286    <init-param> 
     287      <param-name>Name_AttributeType</param-name> 
     288      <param-value>displayName</param-value> 
     289    </init-param> 
     290    <init-param> 
     291      <param-name>Description_AttributeType</param-name> 
     292      <param-value>displayName</param-value> 
     293    </init-param> 
     294 
     295    /// Scope Values can be: OBJECT_SCOPE, ONELEVEL_SCOPE, SUBTREE_SCOPE 
     296    /// For filter use 
     297 
     298    <search> 
     299        <searchType>searchSubject</searchType> 
     300        <param> 
     301            <param-name>filter</param-name> 
     302            <param-value> 
     303                (BannerID=%TERM%) 
     304            </param-value> 
     305        </param> 
     306        <param> 
     307            <param-name>scope</param-name> 
     308            <param-value> 
     309                SUBTREE_SCOPE 
     310            </param-value> 
     311        </param> 
     312        <param> 
     313            <param-name>base</param-name> 
     314            <param-value> 
     315                ou=people,dc=alaska,dc=edu 
     316            </param-value> 
     317        </param> 
     318 
     319    </search> 
     320    <search> 
     321        <searchType>searchSubjectByIdentifier</searchType> 
     322        <param> 
     323            <param-name>filter</param-name> 
     324            <param-value> 
     325                (UASystemID=%TERM%) 
     326            </param-value> 
     327        </param> 
     328        <param> 
     329            <param-name>scope</param-name> 
     330            <param-value> 
     331                SUBTREE_SCOPE 
     332            </param-value> 
     333        </param> 
     334        <param> 
     335            <param-name>base</param-name> 
     336            <param-value> 
     337                ou=people,dc=alaska,dc=edu 
     338            </param-value> 
     339        </param> 
     340    </search> 
     341 
     342    <search> 
     343       <searchType>search</searchType> 
     344         <param> 
     345            <param-name>filter</param-name> 
     346            <param-value> 
     347                (|(BannerID=%TERM%)(UASystemID=%TERM%)(cn=*%TERM%*)(displayName=*%TERM%*)) 
     348            </param-value> 
     349        </param> 
     350        <param> 
     351            <param-name>scope</param-name> 
     352            <param-value> 
     353                SUBTREE_SCOPE 
     354            </param-value> 
     355        </param> 
     356         <param> 
     357            <param-name>base</param-name> 
     358            <param-value> 
     359                ou=people,dc=alaska,dc=edu 
     360            </param-value> 
     361        </param> 
     362    </search> 
     363    <init-param> 
     364      <param-name>subjectVirtualAttribute_0_searchAttribute0</param-name> 
     365      <param-value>${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('UASystemID'), "")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('cn'), "")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('BannerID'), "")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('displayName'), "")}</param-value> 
     366    </init-param> 
     367    <init-param> 
     368      <param-name>sortAttribute0</param-name> 
     369      <param-value>sn</param-value> 
     370    </init-param> 
     371    <init-param> 
     372      <param-name>searchAttribute0</param-name> 
     373      <param-value>searchAttribute0</param-value> 
     374    </init-param> 
     375 
     376     <!-- 
     377     <!- - ##########################  STATUS SECTION for searches to filter out inactives and allow 
     378                                                     the user to filter by status with e.g. status=all 
     379                                                     this is optional, and advanced - -> 
     380     <!- - column or attribute which represents the status - - > 
     381     <!- - 
     382     <init-param> 
     383       <param-name>statusDatastoreFieldName</param-name> 
     384       <param-value>status</param-value> 
     385     </init-param> - - > 
     386     <!- - search string from user which represents the status.  e.g. status=active - - > 
     387     <!- - 
     388     <init-param> 
     389       <param-name>statusLabel</param-name> 
     390       <param-value>status</param-value> 
     391     </init-param> - - > 
     392     <!- - available statuses from screen (if not specified, any will be allowed). comma separated list. 
     393          Note, this is optional and you probably dont want to configure it, it is mostly necessary 
     394          when you have multiple sources with statuses...  if someone types an invalid status 
     395          and you have this configured, it will not filter by it - - > 
     396     <!- - 
     397     <init-param> 
     398       <param-name>statusesFromUser<param-name> 
     399       <param-value>Active, Inactive, Pending, All</param-value> 
     400     </init-param> - - > 
     401     <!- - all label from the user - - > 
     402     <!- - 
     403     <init-param> 
     404       <param-name>statusAllFromUser</param-name> 
     405       <param-value>All</param-value> 
     406     </init-param> - - > 
     407     <!- - if no status is specified, this will be used (e.g. for active only).  Note, the value should be of the 
     408          form the user would type in - - > 
     409     <!- - 
     410     <init-param> 
     411       <param-name>statusSearchDefault</param-name> 
     412       <param-value>status=active</param-value> 
     413     </init-param> - - > 
     414     <!- - translate between screen values of status, and the data store value.  Increment the 0 to 1, 2, etc for more translations. 
     415          so the user could enter: status=active, and that could translate to status_col=A.  The 'user' is what the user types in, 
     416          the 'datastore' is what is in the datastore.  The user part is not case-sensitive.  Note, this could be a many to one - - > 
     417     <!- - 
     418     <init-param> 
     419       <param-name>statusTranslateUser0</param-name> 
     420       <param-value>active</param-value> 
     421     </init-param> 
     422     <init-param> 
     423       <param-name>statusTranslateDatastore0</param-name> 
     424       <param-value>A</param-value> 
     425     </init-param> - - > 
     426     <!- - ########################## END STATUS SECTION - - > 
     427     --> 
     428 
     429    <internal-attribute>searchAttribute0</internal-attribute> 
     430 
     431    ///Attributes you would like to display when doing a search 
     432    <attribute>cn</attribute> 
     433    <attribute>sn</attribute> 
     434    <attribute>displayName</attribute> 
     435    <attribute>BannerID</attribute> 
     436    <attribute>UASystemID</attribute> 
     437 
     438  </source> 
     439}}} 
     440 
     441With this configuration, the subject id is BannerID.  UASystemID is a subject identifier.   
     442 
     443 
     444== Install Grouper database and startup GSH to initialize Grouper objects == 
     445 
     446{{{[root@grinnell grouper.api-2.1.4]# ./bin/gsh.sh -registry -check 
     447Using GROUPER_HOME: /srv/grouper/grouper.api-2.1.4 
     448Using GROUPER_CONF: /srv/grouper/grouper.api-2.1.4/conf 
     449Using JAVA: java 
     450using MEMORY: 64m-750m 
     451Grouper starting up: version: 2.1.4, build date: 2013/06/02 08:38:25, env: <no label configured> 
     452grouper.properties read from: /srv/grouper/grouper.api-2.1.4/conf/grouper.properties 
     453Grouper current directory is: /srv/grouper/grouper.api-2.1.4 
     454log4j.properties read from:   /srv/grouper/grouper.api-2.1.4/conf/log4j.properties 
     455Grouper is logging to file:   /srv/grouper/grouper.api-2.1.4/logs/grouper_error.log, at min level WARN for package: edu.internet2.middleware.grouper, based on log4j.properties 
     456grouper.hibernate.properties: /srv/grouper/grouper.api-2.1.4/conf/grouper.hibernate.properties 
     457grouper.hibernate.properties: grouper@jdbc:oracle:thin:@msct.alaska.edu:1536:MSCT 
     458sources.xml read from:        /srv/grouper/grouper.api-2.1.4/conf/sources.xml 
     459sources.xml groupersource id: g:gsa 
     460sources.xml ldap source id:   ldap: uid=grouper03,ou=resource,dc=alaska,dc=edu@ldaps://edir.alaska.edu:636 
     461sources.xml groupersource id: grouperEntities 
     462(note, might need to type in your response multiple times (Java stdin is flaky)) 
     463(note, you can whitelist or blacklist db urls and users in the grouper.properties) 
     464Are you sure you want to schemaexport all tables (dropThenCreate=F,writeAndRunScript=F) in db user 'grouper', db url 'jdbc:oracle:thin:@msct.alaska.edu:1536:MSCT'? (y|n): 
     465y 
     466Continuing... 
     467Grouper ddl object type 'Grouper' has dbVersion: 0 and java version: 26 
     468Grouper ddl object type 'Subject' has dbVersion: 0 and java version: 1 
     469Grouper database schema DDL requires updates 
     470(should run script manually and carefully, in sections, verify data before drop statements, backup/export important data before starting, follow change log on confluence, dont run exact same script in multiple envs - generate a new one for each env), 
     471script file is: 
     472/srv/grouper/grouper.api-2.1.4/ddlScripts/grouperDdl_20130602_08_56_15_817.sql 
     473Note: this script was not executed due to option passed in 
     474To run script via gsh, carefully review it, then run this: 
     475gsh -registry -runsqlfile /srv/grouper/grouper.api-2.1.4/ddlScripts/grouperDdl_20130602_08_56_15_817.sql 
     476[root@grinnell grouper.api-2.1.4]# ./bin/gsh.sh -registry -runsqlfile ddlScripts/grouperDdl_20130602_08_56_15_817.sql 
     477Using GROUPER_HOME: /srv/grouper/grouper.api-2.1.4 
     478Using GROUPER_CONF: /srv/grouper/grouper.api-2.1.4/conf 
     479Using JAVA: java 
     480using MEMORY: 64m-750m 
     481(note, might need to type in your response multiple times (Java stdin is flaky)) 
     482(note, you can whitelist or blacklist db urls and users in the grouper.properties) 
     483Are you sure you want to run the sql file in db user 'grouper', db url 'jdbc:oracle:thin:@msct.alaska.edu:1536:MSCT'? (y|n): 
     484y 
     485Continuing... 
     486Script was executed successfully 
     487 
     488Grouper starting up: version: 2.1.4, build date: 2013/06/02 08:38:25, env: <no label configured> 
     489grouper.properties read from: /srv/grouper/grouper.api-2.1.4/conf/grouper.properties 
     490Grouper current directory is: /srv/grouper/grouper.api-2.1.4 
     491log4j.properties read from:   /srv/grouper/grouper.api-2.1.4/conf/log4j.properties 
     492Grouper is logging to file:   /srv/grouper/grouper.api-2.1.4/logs/grouper_error.log, at min level WARN for package: edu.internet2.middleware.grouper, based on log4j.properties 
     493grouper.hibernate.properties: /srv/grouper/grouper.api-2.1.4/conf/grouper.hibernate.properties 
     494grouper.hibernate.properties: grouper@jdbc:oracle:thin:@msct.alaska.edu:1536:MSCT 
     495sources.xml read from:        /srv/grouper/grouper.api-2.1.4/conf/sources.xml 
     496sources.xml groupersource id: g:gsa 
     497sources.xml ldap source id:   ldap: uid=grouper03,ou=resource,dc=alaska,dc=edu@ldaps://edir.alaska.edu:636 
     498sources.xml groupersource id: grouperEntities 
     499[root@grinnell grouper.api-2.1.4]# 
     500[root@grinnell grouper.api-2.1.4]# 
     501[root@grinnell grouper.api-2.1.4]# 
     502[root@grinnell grouper.api-2.1.4]# ./bin/gsh.sh 
     503Using GROUPER_HOME: /srv/grouper/grouper.api-2.1.4 
     504Using GROUPER_CONF: /srv/grouper/grouper.api-2.1.4/conf 
     505Using JAVA: java 
     506using MEMORY: 64m-750m 
     507Grouper starting up: version: 2.1.4, build date: 2013/06/02 08:38:25, env: <no label configured> 
     508grouper.properties read from: /srv/grouper/grouper.api-2.1.4/conf/grouper.properties 
     509Grouper current directory is: /srv/grouper/grouper.api-2.1.4 
     510log4j.properties read from:   /srv/grouper/grouper.api-2.1.4/conf/log4j.properties 
     511Grouper is logging to file:   /srv/grouper/grouper.api-2.1.4/logs/grouper_error.log, at min level WARN for package: edu.internet2.middleware.grouper, based on log4j.properties 
     512grouper.hibernate.properties: /srv/grouper/grouper.api-2.1.4/conf/grouper.hibernate.properties 
     513grouper.hibernate.properties: grouper@jdbc:oracle:thin:@msct.alaska.edu:1536:MSCT 
     514sources.xml read from:        /srv/grouper/grouper.api-2.1.4/conf/sources.xml 
     515sources.xml groupersource id: g:gsa 
     516sources.xml ldap source id:   ldap: uid=grouper03,ou=resource,dc=alaska,dc=edu@ldaps://edir.alaska.edu:636 
     517sources.xml groupersource id: grouperEntities 
     518Grouper warning: cannot find group from config: wheel group from grouper.properties key: groups.wheel.group: etc:sysadmingroup 
     519Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInvite 
     520Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInviteExpireDate 
     521Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInviteDate 
     522Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectEmailAddress 
     523Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInviteGroupUuids 
     524Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInviteMemberId 
     525Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInviteUuid 
     526Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInviteEmailWhenRegistered 
     527Grouper note: auto-created attributeDefName: etc:attribute:attrExternalSubjectInvite:externalSubjectInviteEmail 
     528Grouper note: auto-created attributeDefName: etc:attribute:rules:rule 
     529Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleActAsSubjectId 
     530Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleActAsSubjectIdentifier 
     531Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleActAsSubjectSourceId 
     532Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleCheckType 
     533Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleCheckOwnerId 
     534Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleCheckOwnerName 
     535Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleCheckStemScope 
     536Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleCheckArg0 
     537Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleCheckArg1 
     538Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleIfOwnerId 
     539Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleIfOwnerName 
     540Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleIfConditionEl 
     541Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleIfConditionEnum 
     542Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleIfConditionEnumArg0 
     543Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleIfConditionEnumArg1 
     544Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleIfStemScope 
     545Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleThenEl 
     546Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleThenEnum 
     547Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleThenEnumArg0 
     548Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleThenEnumArg1 
     549Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleThenEnumArg2 
     550Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleValid 
     551Grouper note: auto-created attributeDefName: etc:attribute:rules:ruleRunDaemon 
     552Grouper note: auto-created attributeDefName: etc:attribute:permissionLimits:limitExpression 
     553Grouper note: auto-created attributeDefName: etc:attribute:permissionLimits:limitIpOnNetworks 
     554Grouper note: auto-created attributeDefName: etc:attribute:permissionLimits:limitIpOnNetworkRealm 
     555Grouper note: auto-created attributeDefName: etc:attribute:permissionLimits:limitLabelsContain 
     556Grouper note: auto-created attributeDefName: etc:attribute:permissionLimits:limitAmountLessThan 
     557Grouper note: auto-created attributeDefName: etc:attribute:permissionLimits:limitAmountLessThanOrEqual 
     558Grouper note: auto-created attributeDefName: etc:attribute:permissionLimits:limitWeekday9to5 
     559Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoader 
     560Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderType 
     561Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderDbName 
     562Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderScheduleType 
     563Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderQuartzCron 
     564Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderIntervalSeconds 
     565Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderPriority 
     566Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderAttrsLike 
     567Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderAttrQuery 
     568Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderAttrSetQuery 
     569Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderActionQuery 
     570Grouper note: auto-created attributeDefName: etc:attribute:attrLoader:attributeLoaderActionSetQuery 
     571Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdap 
     572Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapType 
     573Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapServerId 
     574Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapFilter 
     575Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapQuartzCron 
     576Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapSearchDn 
     577Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapSubjectAttribute 
     578Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapSourceId 
     579Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapSubjectIdType 
     580Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapAndGroups 
     581Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapSearchScope 
     582Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapPriority 
     583Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapGroupsLike 
     584Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapGroupAttribute 
     585Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapAttributeFilterExpression 
     586Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapExtraAttributes 
     587Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapErrorUnresolvable 
     588Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapGroupNameExpression 
     589Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapGroupDisplayNameExpression 
     590Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapGroupDescriptionExpression 
     591Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapSubjectExpression 
     592Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapGroupTypes 
     593Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapReaders 
     594Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapViewers 
     595Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapAdmins 
     596Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapUpdaters 
     597Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapOptins 
     598Grouper note: auto-created attributeDefName: etc:attribute:loaderLdap:grouperLoaderLdapOptouts 
     599Grouper note: auto-created attributeDefName: etc:attribute:entities:entitySubjectIdentifier 
     600Type help() for instructions 
     601gsh 0% addGroup("etc", "sysadmingroup", "sysadmingroup") 
     602group: name='etc:sysadmingroup' displayName='etc:sysadmingroup' uuid='481175bb2a9a4e909273eec0a8fc7b21' 
     603gsh 1% quit 
     604}}} 
     605 
     606 
     607== Start Grouper Daemon == 
     608{{{ 
     609[root@grinnell ~]# cd /srv/grouper/grouper.api-2.1.4 
     610[root@grinnell grouper.api-2.1.4]# nohup ./bin/gsh.sh -loader & 
     611[1] 2217 
     612[root@grinnell grouper.api-2.1.4]# nohup: ignoring input and appending output to `nohup.out' 
     613}}}