LDAP connection error causes resolver to fail

[Terry Fleury]

On 2017-06-08 2:32 PM, Cantor, Scott wrote:

--- snip ---

> The main piece is the property in services.properties that masks resolver failure. I won't argue whether the default is good or bad, but it's there to be changed if you prefer. As for whether returning an error to the SP makes sense, well, I doubt it. But YMMV. Anyway, you can do it.

Thanks, I was not aware of this setting. I'll test it out.

--- snip ---

> If you want data to be resolved even if LDAP is down, then the issue is in the resolver, making sure you have failure settings configured right, and possibly providing a failover connector. If you want an error, then the mask property in the services.properties file will help with that.

A failover connector with static values seems to work. I had to set the
values of the static connector attributes to a single space (" "), which
isn't exactly correct, but I understand the rest of the attributes need
to have some data to work with. This solution might be 'good enough'.

Thanks for your help, Scott.

-Terry