This is an automated email from the ASF dual-hosted git repository.
pvillard pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/master by this push:
new 531c84a NIFI-5972: Converting some warning log messages to debug as
they could possibly be due to a valid scenario like NiFi users belonging to a
group that is not relevant to NiFi.
531c84a is described below
commit 531c84ac31f93ef72521134a7cc5ea19a2f1e276
Author: Matt Gilman <[email protected]>
AuthorDate: Wed Jan 23 14:10:17 2019 -0500
NIFI-5972: Converting some warning log messages to debug as they could
possibly be due to a valid scenario like NiFi users belonging to a group that
is not relevant to NiFi.
Signed-off-by: Pierre Villard <[email protected]>
This closes #3274.
---
.../org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java | 13 ++++++++-----
1 file changed, 8 insertions(+), 5 deletions(-)
diff --git
a/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
b/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
index 9b5dada..ae00238 100644
---
a/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
+++
b/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
@@ -506,7 +506,8 @@ public class LdapUserGroupProvider implements
UserGroupProvider {
final Attribute attributeGroups =
ctx.getAttributes().get(userGroupNameAttribute);
if (attributeGroups == null) {
- logger.warn("User group name attribute ["
+ userGroupNameAttribute + "] does not exist. Ignoring group membership.");
+ logger.debug(String.format("User group
name attribute [%s] does not exist for %s. This may be due to "
+ + "misconfiguration or the user
may just not belong to any groups. Ignoring group membership.",
userGroupNameAttribute, identity));
} else {
try {
final NamingEnumeration<String>
groupValues = (NamingEnumeration<String>) attributeGroups.getAll();
@@ -562,7 +563,8 @@ public class LdapUserGroupProvider implements
UserGroupProvider {
if (!StringUtils.isBlank(groupMemberAttribute)) {
Attribute attributeUsers =
ctx.getAttributes().get(groupMemberAttribute);
if (attributeUsers == null) {
- logger.warn("Group member attribute [" +
groupMemberAttribute + "] does not exist. Ignoring group membership.");
+ logger.debug(String.format("Group member
attribute [%s] does not exist for %s. This may be due to "
+ + "misconfiguration or the group
may not have any members. Ignoring group membership.", groupMemberAttribute,
name));
} else {
try {
final NamingEnumeration<String>
userValues = (NamingEnumeration<String>) attributeUsers.getAll();
@@ -577,7 +579,8 @@ public class LdapUserGroupProvider implements
UserGroupProvider {
if (user != null) {
groupToUserIdentifierMappings.computeIfAbsent(referencedGroupValue, g -> new
HashSet<>()).add(user.getIdentifier());
} else {
-
logger.warn(String.format("%s contains member %s but that user was not found
while searching users. Ignoring group membership.", name, userValue));
+
logger.debug(String.format("%s contains member %s but that user was not found
while searching users. This may be due "
+ + "to a
misconfiguration or it's possible the user is not a NiFi user. Ignoring group
membership.", name, userValue));
}
} else {
// since performUserSearch is
false, then the referenced group attribute must be blank... the user value must
be the dn
@@ -621,8 +624,8 @@ public class LdapUserGroupProvider implements
UserGroupProvider {
// any remaining groupDn's were referenced by a user but not
found while searching groups
groupToUserIdentifierMappings.forEach((referencedGroupValue,
userIdentifiers) -> {
- logger.warn(String.format("[%s] are members of %s but that
group was not found while searching users. Ignoring group membership.",
- StringUtils.join(userIdentifiers, ", "),
referencedGroupValue));
+ logger.debug(String.format("[%s] are members of %s but
that group was not found while searching groups. This may be due to a
misconfiguration "
+ + "or it's possible the group is not a
NiFi group. Ignoring group membership.", StringUtils.join(userIdentifiers, ",
"), referencedGroupValue));
});
} else {
// since performGroupSearch is false, then the referenced user
attribute must be blank... the group value must be the dn