Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-1707

pspng should handle UNWILLING_TO_PERFORM from AD

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.3.0.patch
    • Component/s: None
    • Labels:
      None

      Description

      I'm surprised to see an UNWILLING_TO_PERFORM error; pspng would correctly handle a NO_SUCH_ATTRIBUTE error.

      Move the pointer forward for now and please create a jira. I'll look at duplicating this and handling it automatically.

      16: No Such Attribute

      This indicates that the client attempted to interact with an attribute that does not exist in the target entry (e.g., to remove an attribute or value that does not exist).

      ________________________________________

      Bert, Im getting tons of error messages about this… are you aware of this issue? Should I just move the change log pointer forward (which I think means I have to stop the loader, which I need to wait a bit to do that…) Thanks, Chris

      #####################

      Looks like it’s trying to delete a user who is not in the group (at least in AD) to begin with. I’m looking and dadkins is not present

      Or the geek way

      Is this person not in kite, which is why this is failing?

      2018-03-01 08:42:40,789: [DefaultQuartzScheduler_Worker-7] ERROR LdapProvisioner.makeIndividualLdapChanges(593) - pspng_activedirectory: LDAP Error that might be schema related. Perhaps you need to set emptyGroupsSupported=no?. ProvisioningWorkItem[clog=clog #43662061 / ChangeLog type: membership: deleteMembership,group=XXXXXX,subject=XXXXXXXXXXX]/[org.ldaptive.ModifyRequest@1292697890::modifyDn=cn=XXXXXXXXXXXX,ou=grouper,, attrMods=[[org.ldaptive.AttributeModification@281380531::attrMod=REMOVE, XXXXXXXcontrols=null, referralHandler=null, intermediateResponseHandlers=null]
      [org.ldaptive.LdapException@403593823::resultCode=UNWILLING_TO_PERFORM, matchedDn=null, responseControls=null, referralURLs=null, messageId=-1, message=javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 00000561: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0

        Attachments

          Activity

            People

            Assignee:
            bert.beelindgren@at.internet2.edu Bert Bee-Lindgren
            Reporter:
            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Smart Checklist