Grouper Users - Open Discussion List

[Scott Koranda <>]

Hi,

Suppose an identifier is removed from all groups in Grouper.

Now suppose that as ldappcng is running a bulkSync operation
the LDAP entry for the group is updated and the hasMember and
member attributes are both correctly updated for the DN that
represents that group, so that the identitifer is not a member
of the group.

But suppose that as ldappcng attempts to synchronize the entry
for the identifier and edit the isMemberOf attribute there is
a failure (say LDAP falls over).

At this point the state of Grouper and the DN for the
identifier in ldap are not synchronized. Grouper says the
identifier is not a member of any groups but the identifier's
entry in LDAP has isMemberOf entries that claim the identifier
is a member of some groups.

Since that identifier is no longer a member of any group in
Grouper will ldappcng during the next bulkSync (assuming LDAP
is back up) make any attempt to synchronize the identifier's
isMemberOf attribute?

Is there a difference in the behavior for 1.6.x and 2.0.x and
2.1.x?

Thanks,

Scott