Per discussion on the grouper-dev mailing list, have an option for blocking realtime provisioning on ldap (and other systems?) errors.

See the thread at https://lists.internet2.edu/sympa/arc/grouper-dev/2012-05/msg00035.html

I hope this is a sufficient request.