This is an automated email from the ASF dual-hosted git repository.

pvillard pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/nifi.git


The following commit(s) were added to refs/heads/master by this push:
     new 531c84a  NIFI-5972: Converting some warning log messages to debug as 
they could possibly be due to a valid scenario like NiFi users belonging to a 
group that is not relevant to NiFi.
531c84a is described below

commit 531c84ac31f93ef72521134a7cc5ea19a2f1e276
Author: Matt Gilman <[email protected]>
AuthorDate: Wed Jan 23 14:10:17 2019 -0500

    NIFI-5972: Converting some warning log messages to debug as they could 
possibly be due to a valid scenario like NiFi users belonging to a group that 
is not relevant to NiFi.
    
    Signed-off-by: Pierre Villard <[email protected]>
    
    This closes #3274.
---
 .../org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git 
a/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
 
b/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
index 9b5dada..ae00238 100644
--- 
a/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
+++ 
b/nifi-nar-bundles/nifi-ldap-iaa-providers-bundle/nifi-ldap-iaa-providers/src/main/java/org/apache/nifi/ldap/tenants/LdapUserGroupProvider.java
@@ -506,7 +506,8 @@ public class LdapUserGroupProvider implements 
UserGroupProvider {
                                 final Attribute attributeGroups = 
ctx.getAttributes().get(userGroupNameAttribute);
 
                                 if (attributeGroups == null) {
-                                    logger.warn("User group name attribute [" 
+ userGroupNameAttribute + "] does not exist. Ignoring group membership.");
+                                    logger.debug(String.format("User group 
name attribute [%s] does not exist for %s. This may be due to "
+                                            + "misconfiguration or the user 
may just not belong to any groups. Ignoring group membership.", 
userGroupNameAttribute, identity));
                                 } else {
                                     try {
                                         final NamingEnumeration<String> 
groupValues = (NamingEnumeration<String>) attributeGroups.getAll();
@@ -562,7 +563,8 @@ public class LdapUserGroupProvider implements 
UserGroupProvider {
                             if (!StringUtils.isBlank(groupMemberAttribute)) {
                                 Attribute attributeUsers = 
ctx.getAttributes().get(groupMemberAttribute);
                                 if (attributeUsers == null) {
-                                    logger.warn("Group member attribute [" + 
groupMemberAttribute + "] does not exist. Ignoring group membership.");
+                                    logger.debug(String.format("Group member 
attribute [%s] does not exist for %s. This may be due to "
+                                            + "misconfiguration or the group 
may not have any members. Ignoring group membership.", groupMemberAttribute, 
name));
                                 } else {
                                     try {
                                         final NamingEnumeration<String> 
userValues = (NamingEnumeration<String>) attributeUsers.getAll();
@@ -577,7 +579,8 @@ public class LdapUserGroupProvider implements 
UserGroupProvider {
                                                 if (user != null) {
                                                     
groupToUserIdentifierMappings.computeIfAbsent(referencedGroupValue, g -> new 
HashSet<>()).add(user.getIdentifier());
                                                 } else {
-                                                    
logger.warn(String.format("%s contains member %s but that user was not found 
while searching users. Ignoring group membership.", name, userValue));
+                                                    
logger.debug(String.format("%s contains member %s but that user was not found 
while searching users. This may be due "
+                                                                    + "to a 
misconfiguration or it's possible the user is not a NiFi user. Ignoring group 
membership.", name, userValue));
                                                 }
                                             } else {
                                                 // since performUserSearch is 
false, then the referenced group attribute must be blank... the user value must 
be the dn
@@ -621,8 +624,8 @@ public class LdapUserGroupProvider implements 
UserGroupProvider {
 
                 // any remaining groupDn's were referenced by a user but not 
found while searching groups
                 groupToUserIdentifierMappings.forEach((referencedGroupValue, 
userIdentifiers) -> {
-                    logger.warn(String.format("[%s] are members of %s but that 
group was not found while searching users. Ignoring group membership.",
-                            StringUtils.join(userIdentifiers, ", "), 
referencedGroupValue));
+                    logger.debug(String.format("[%s] are members of %s but 
that group was not found while searching groups. This may be due to a 
misconfiguration "
+                                    + "or it's possible the group is not a 
NiFi group. Ignoring group membership.", StringUtils.join(userIdentifiers, ", 
"), referencedGroupValue));
                 });
             } else {
                 // since performGroupSearch is false, then the referenced user 
attribute must be blank... the group value must be the dn

Reply via email to