Uploaded image for project: 'OpenIDM'
  1. OpenIDM
  2. OPENIDM-13870

Queued sync breaks implicit synchronization

    Details

    • Verified Version/s:
    • Status:
      Employee

      Description

      Under some circumstances, when the queued synchronization feature is enabled, it breaks the implicit synchronization to target systems. The steps below reproduce the issue.

      • Start OpenIDM 6.5.0.1, using the "provisioning with roles" samples and DS as internal repo.
      • replay the whole sample
      • at the end, bjensen should have the "Employee" role.

      Now:

      • remove the "Employee" assignment from the "Employee" role: as expected, you should notice that bjensen's entry in DS is updated accordingly: her EmployeeType attribute has been removed and her isMemberOf attribute only contains "cn=openidm2,...".
      • add again the "Employee" assignment to the "Employee" role: as expected, you should notice that bjensen's entry in DS is updated accordingly: her EmployeeType attribute has been populated and her isMemberOf attribute now contains 3 groups.

      Now edit the sync.json to enable the queued sync feature for the "managedUser_systemLdapAccounts" mapping, by adding:
      "queuedSync" :

      {                 "enabled" : true,                 "pageSize" : 100,                 "pollingInterval" : 1000,                 "maxQueueSize" : 20000,                 "maxRetries" : 5,                 "retryDelay" : 1000,                 "postRetryAction" : "logged-ignore"             }

      ,

      Now remove again the "Employee" assignment from the "Employee" role: you'll notice that:

      • bjensen's entry in DS is not updated (which here basically means that enabling the queued sync breaks the synchronization between IDM and the LDAP target resource)
      • the exception mentioned in https://bugster.forgerock.org/jira/browse/OPENIDM-13821 is triggered and displayed in the IDM debug log
      • a new entry is added to the sync queue such as the one below

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                brmiller Brendan Miller
                Reporter:
                cgrosjean Cyril Grosjean
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: