Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-2869

AD Incremental Sync may result AD duplicate groups appearing and disappearing after synchronizations


    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Low Low
    • None
    • 2.4.4, 2.5
    • Directory - LDAP
    • None

      The incremental sync with AD does not play well with duplicate groups. For example:

      1. Set up an AD with multiple groups with the same CN.
      2. Do a full sync. Note the group is ignored because the sync detects multiple groups (as was implemented in CWD-2504).
      3. Add a user to one of the groups and do and sync again.
      4. (BUG) The group you changed will now appear in Crowd.

      The problem is that the incremental sync will only see the group that changed and incorrectly assume that there is now only one group.

      1. Restart crowd and sync again. This will be a full sync.
      2. The group will have again disappeared from Crowd because the full sync again detects the duplicate groups.

      So basically when Crowd does a full sync it will make a duplicate group disappear. However, the duplicate group may appear if one of the two groups is changed before an incremental sync.

            Unassigned Unassigned
            bbain bain
            1 Vote for this issue
            0 Start watching this issue