Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-1391

PSPNG - Failing on missing members

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.3.0
    • Fix Version/s: 2.3.0.patch
    • Component/s: provisioning
    • Labels:
      None

      Description

      When a subject account does not exist in the provisioning target (and pspng's subject-creation is disabled), PSPNG should warn about it and let that subject be provisioned by whatever full sync occurs after it is finally created by some sort of (non-pspng) process.

      Presently, PSPNG does the following:
      1) PSPNG errors when adding users to a group who do not have accounts in the AD.
      This is fine, however in doing so it stalls the PSPNG loader as it keeps retrying the same group over and over (see attached log for issue). Is it possible to have PSPNG acknowledge but ignore the error and not try to keep repeating the same process. This way we can retry 24hours later when the next fullsync cron runs - and hopefully our account provisioning service has had a chance to create the account in AD.
      I’ve tried setting the following value, but it doesn’t make any difference
      changeLog.psp.retryOnError = false

        Smart Checklist

          Attachments

            Activity

              People

              Assignee:
              bert.beelindgren@at.internet2.edu Bert Bee-Lindgren
              Reporter:
              bert.beelindgren@at.internet2.edu Bert Bee-Lindgren
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: