Bug 56910 – ID Connector discards (and later removes) rejected transactions without notification

Bug 56910 - ID Connector discards (and later removes) rejected transactions without notification


Summary:	ID Connector discards (and later removes) rejected transactions without notif...

Status:	ASSIGNED

Product:	UCS@school
Classification:	Unclassified
Component:	ucsschool-id-connector
Version:	UCS@school 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Ole Schwiegert
QA Contact:

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2023-12-12 11:37 CET by Jan-Luca Kiok
Modified:	2024-04-30 08:06 CEST (History)
CC List:	2 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	4: A User would return the product
User Pain:	0.091
Enterprise Customer affected?:
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Error handling
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jan-Luca Kiok

2023-12-12 11:37:25 CET

If an error occurs while syncing objects via the ID Connector the error is logged, the transaction discarded and the corresponding payload is moved to the trash dir.
This means that operators are not notified that there is a problem and if it is discovered later and the automatic cleaning mechanism and/or logrotation is turned on the payload and/or log statements might already be lost.

As a first and quick step that does not alter the behavior too much we should move rejected transactions to a new directory (e.g. "rejected") instead of moving them to the trash.
It might be considerable to also log these errors to a new logfile too.

Instead of having to rely on log analysis operators could monitor this directory to be notified sooner and easier.
We should avoid to clean this directory with the auto mechanism so that files are not removed without manual approval.