Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.3.0
-
None
Description
When a subject account does not exist in the provisioning target (and pspng's subject-creation is disabled), PSPNG should warn about it and let that subject be provisioned by whatever full sync occurs after it is finally created by some sort of (non-pspng) process.
Presently, PSPNG does the following:
1) PSPNG errors when adding users to a group who do not have accounts in the AD.
This is fine, however in doing so it stalls the PSPNG loader as it keeps retrying the same group over and over (see attached log for issue). Is it possible to have PSPNG acknowledge but ignore the error and not try to keep repeating the same process. This way we can retry 24hours later when the next fullsync cron runs - and hopefully our account provisioning service has had a chance to create the account in AD.
I’ve tried setting the following value, but it doesn’t make any difference
changeLog.psp.retryOnError = false