Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-2762

Support changing active status (activating/deactivating) for users in OpenLDAP directories

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Medium
    • None
    • 2.0.7, 2.4, 2.8.3, 2.8.4, 2.10.1
    • Directory - LDAP, User Management

    • Crowd with LDAP as backend, LDAP administration by Collax Businness Server

    Description

      When we change in Collax a user to "inactive", this state is not reflected in the crowd database.
      The proposed workaround is to remove the user from ldap and re-create the user on crowd. The result is two directories of users in one company. Administration, search, migration will become error-prone and is not acceptable for us. After using crowd with LDAP for about 2 yours, we get to our licence-limit of 100, where the active users are about 70 users.

      Steps to reproduce:

      1. install Crowd
      2. Create new Directory connecting to OpenLDAP using Connector
      3. try to disable any user sync from OpenLDAP by unchecking the Active checkbox

      Expected Behaviour:
      User will be disactivated

      Actual Behaviour:
      Crowd indicate update is sucessful, but the user remain active

      Environment:
      Crowd connected to OpenLDAP

      Notes
      This is not reproducible when Crowd is connecting to Microsoft AD

      Attachments

        1. CWD-2762-2.11.1.patch
          25 kB
        2. CWD-2762-3.1.2.patch
          33 kB
        3. CWD-2762-for-2.9.1.diff
          23 kB
        4. CWD-2762-version1.diff
          25 kB
        5. screenshot2.png
          screenshot2.png
          70 kB

        Issue Links

          causes

          Suggestion - JRACLOUD-34557 Jira should read from OpenLDAP a flag to make users inactive

          • Closed

          Suggestion - JRASERVER-34557 Jira should read from OpenLDAP a flag to make users inactive

          • Gathering Interest
          is related to

          Suggestion - JRASERVER-65467 Jira should read from FreeIPA a flag to make users inactive

          • Closed

          Suggestion - CWD-2033 "Active" flag for groups does not work / support deactivating groups

          • Closed

          Suggestion - CWD-5533 Support sync for active/inactive status with Novell eDirectory

          • Gathering Interest

          Suggestion - CWD-1740 Support changing active status (activating/deactivating) for users in ApacheDS directories

          • Gathering Interest

          Suggestion - CWD-1930 Add UI to bulk Activate/Deactivate users

          • Under Consideration
          relates to

          Suggestion - CWD-995 Provide Crowd support for Active Directory's "Account Disabled" flag

          • Closed
          is cloned by

          KRAK-4556 Loading...

          links to

          Web Link [FreeIPA Trac] Implement standard account lockout attribute, as per RFC

          mentioned in

          Page Loading...

          Page Loading...

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              0de2fc390d16 jh
              Votes:
              52 Vote for this issue
              Watchers:
              50 Start watching this issue

              Dates

                Created:
                Updated: