Uploaded image for project: 'Red Hat Developer Hub Bugs'
  1. Red Hat Developer Hub Bugs
  2. RHDHBUGS-412

LDAP catalog provider: Failed sync for a single user stops entire sync process

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • 1.5.0
    • Authentication
    • None
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • RHDH Security 3272, RHDH Security 3273

      Description of problem:

       

      When the LDAP catalog provider encounters an error while syncing an individual user, the entire sync process stops. This prevents other users from being ingested, even if their data is valid. Ideally, the provider should skip over the failing user, log the error with an informative message, and continue processing the remaining users.

       

      This would require changes upstream in the LDAP plugin

      Prerequisites (if any, like setup, operators/versions):

      Steps to Reproduce

      As seen in these support tickets: RHIDP-5966, RHDHBUGS-177

      Actual results:

      Ingestion stops completely after receiving this error on a user:
      "LdapOrgEntityProvider:default refresh failed, TypeError: Malformed entity envelope, TypeError: /metadata/name must NOT have fewer than 1 characters - limit: 1 Malformed entity envelope, TypeError: /metadata/name must NOT have fewer than 1 characters - limit: 1"

      Expected results:

      • Error message clearly indicates which user failed (ensure username is not leaked in the regular logs) and why the failure occurred (e.g. missing uid attribute)
      • There should also be a way to allow syncing to continue on certain errors while logging and skipping the problematic users

      xReproducibility (Always/Intermittent/Only Once):

      Always

      Build Details:

      Additional info (Such as Logs, Screenshots, etc):

              rh-ee-jhe Jessica He
              rh-ee-jhe Jessica He
              RHIDP - Security
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: