Grouper Users - Open Discussion List

[Tom Zeller <>]

I think this failure scenario is possible regardless of ldappc[ng] version.

Grouper would need to communicate that a Subject is unresolvable
because a Source is unavailable, temporarily or otherwise.

Perhaps this will make an interesting agenda item for a grouper-dev call.

Good catch, Scott.

TomZ

On Thu, Feb 24, 2011 at 3:56 PM, Scott Koranda
<>
 wrote:
> Hi,
>
> Is this failure scenario possible for the ldappc distributed
> with Grouper 1.4.x?
>
> - a ldappc provisioning cycle begins
> - ldappc establishes a secure connection to the LDAP into
>  which it will provision
> - ldappc begins calculating what needs to be provisioned or
>  deprovisioned
> - the X.509 certificate for the LDAP server expires
> - Grouper API is unable to resolve subjects from the LDAP on
>  behalf of ldappc because it cannot authenticate to the LDAP
> - ldappc is unable, through Grouper, to resolve subject
>  information
> - ldappc devprovisions some group memberships in LDAP
>
> Is that failure scenario possible for ldappc-ng?
>
> Thanks,
>
> Scott
>