Document NOT_ATTEMPTED

Project: http://git-wip-us.apache.org/repos/asf/syncope/repo
Commit: http://git-wip-us.apache.org/repos/asf/syncope/commit/45124bde
Tree: http://git-wip-us.apache.org/repos/asf/syncope/tree/45124bde
Diff: http://git-wip-us.apache.org/repos/asf/syncope/diff/45124bde

Branch: refs/heads/master
Commit: 45124bdec015fa615fe2df19a146a24c9af234e1
Parents: 0c1f92a
Author: Francesco Chicchiriccò <ilgro...@apache.org>
Authored: Wed Mar 7 17:10:14 2018 +0100
Committer: Francesco Chicchiriccò <ilgro...@apache.org>
Committed: Wed Mar 7 17:10:23 2018 +0100

----------------------------------------------------------------------
 .../concepts/provisioning/propagation.adoc      | 47 +++++++++++++-------
 1 file changed, 30 insertions(+), 17 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/syncope/blob/45124bde/src/main/asciidoc/reference-guide/concepts/provisioning/propagation.adoc
----------------------------------------------------------------------
diff --git 
a/src/main/asciidoc/reference-guide/concepts/provisioning/propagation.adoc 
b/src/main/asciidoc/reference-guide/concepts/provisioning/propagation.adoc
index 32d56fe..c54c77f 100644
--- a/src/main/asciidoc/reference-guide/concepts/provisioning/propagation.adoc
+++ b/src/main/asciidoc/reference-guide/concepts/provisioning/propagation.adoc
@@ -35,6 +35,14 @@ propagation process:
 * *Any Object*: the external resources directly assigned plus the ones 
assigned to Groups configured for the Any Object
 ====
 
+[WARNING]
+.Adequate capabilities to Connectors and External Resources
+====
+Ensure to provide an adequate set of 
<<connector-instance-details,capabilities>> to underlying Connectors and
+External Resources for the actual operations to perform, otherwise the 
Propagation Tasks will report `NOT_ATTEMPTED` as
+execution status.
+====
+
 By default, the propagation process is controlled by the
 ifeval::["{snapshotOrRelease}" == "release"]
 
https://github.com/apache/syncope/blob/syncope-{docVersion}/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/propagation/PriorityPropagationTaskExecutor.java[PriorityPropagationTaskExecutor^],
@@ -62,6 +70,28 @@ 
https://github.com/apache/syncope/blob/master/core/provisioning-api/src/main/jav
 endif::[]
 interface can be provided, in case the required behaviour does not fit into 
the provided implementation.
 
+[[propagation-password]]
+[TIP]
+.Propagate password values
+====
+Password values are kept in the internal storage according to the 
`password.cipher.algorithm`
+<<configuration-parameters, configuration parameter>>, whose value is `SHA1` 
by default.
+`SHA1` is a hash algorithm: this means that, once stored, the cleartext value 
cannot be reverted any more.
+
+During propagation, Syncope fetches all data of the given User, then prepares 
the attributes to propagate, according to
+the provided mapping; password has a special treatment:
+
+* if cleartext value is available (this cannot happen during 
<<provisioning-push>>), it is sent to the External Resource
+* if `password.cipher.algorithm` is `AES` (the only supported reversible 
algorithm), then the ciphered password value is
+ made cleartext again, and sent to the External Resource
+* if the <<external-resource-details,generate random password flag>> is set, a 
random password value is generated
+ according to the defined password policies, and sent to the External Resource
+* otherwise, a `null` value is sent to the External Resource
+
+Password values are always sent to External Resources wrapped as ConnId
+http://connid.tirasa.net/apidocs/1.4/org/identityconnectors/common/security/GuardedString.html[GuardedString^]
 objects.
+====
+
 ===== PropagationActions
 
 The propagation process can be decorated with custom logic to be invoked 
around task execution, by associating
@@ -120,20 +150,3 @@ endif::[]
 | Required for setup of an External Resource based on the 
https://connid.atlassian.net/wiki/display/BASE/Google+Apps#GoogleApps-Configuration[ConnId
 GoogleApps connector bundle^].
 
 |===
-
-[[propagation-password]]
-[TIP]
-.Propagate password values
-====
-Password values are kept in the internal storage according to the 
`password.cipher.algorithm` <<configuration-parameters, configuration 
parameter>>, whose value is `SHA1` by default.
-`SHA1` is a hash algorithm: this means that, once stored, the cleartext value 
cannot be reverted any more.
-
-During propagation, Syncope fetches all data of the given User, then prepares 
the attributes to propagate, according to the provided mapping; password has a 
special treatment:
-
-* if cleartext value is available (this cannot happen during 
<<provisioning-push>>), it is sent to the External Resource
-* if `password.cipher.algorithm` is `AES` (the only supported reversible 
algorithm), then the ciphered password value is made cleartext again, and sent 
to the External Resource
-* if the <<external-resource-details,generate random password flag>> is set, a 
random password value is generated according to the defined password policies, 
and sent to the External Resource
-* otherwise, a `null` value is sent to the External Resource
-
-Password values are always sent to External Resources wrapped as ConnId 
http://connid.tirasa.net/apidocs/1.4/org/identityconnectors/common/security/GuardedString.html[GuardedString^]
 objects.
-====

Reply via email to