pspng should handle UNWILLING_TO_PERFORM from AD

I'm surprised to see an UNWILLING_TO_PERFORM error; pspng would correctly handle a NO_SUCH_ATTRIBUTE error.

Move the pointer forward for now and please create a jira. I'll look at duplicating this and handling it automatically.

16: No Such Attribute

This indicates that the client attempted to interact with an attribute that does not exist in the target entry (e.g., to remove an attribute or value that does not exist).

________________________________________

Bert, Im getting tons of error messages about this… are you aware of this issue? Should I just move the change log pointer forward (which I think means I have to stop the loader, which I need to wait a bit to do that…) Thanks, Chris

#####################

Looks like it’s trying to delete a user who is not in the group (at least in AD) to begin with. I’m looking and dadkins is not present

Or the geek way

Is this person not in kite, which is why this is failing?

2018-03-01 08:42:40,789: [DefaultQuartzScheduler_Worker-7] ERROR LdapProvisioner.makeIndividualLdapChanges(593) - pspng_activedirectory: LDAP Error that might be schema related. Perhaps you need to set emptyGroupsSupported=no?. ProvisioningWorkItem[clog=clog #43662061 / ChangeLog type: membership: deleteMembership,group=XXXXXX,subject=XXXXXXXXXXX]/[org.ldaptive.ModifyRequest@1292697890::modifyDn=cn=XXXXXXXXXXXX,ou=grouper,, attrMods=[[org.ldaptive.AttributeModification@281380531::attrMod=REMOVE, XXXXXXXcontrols=null, referralHandler=null, intermediateResponseHandlers=null]
[org.ldaptive.LdapException@403593823::resultCode=UNWILLING_TO_PERFORM, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1, message=javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 00000561: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0