Uploaded image for project: 'Crowd'
  1. Crowd
  2. CWD-2869

AD Incremental Sync may result AD duplicate groups appearing and disappearing after synchronizations

    XMLWordPrintable

Details

    • Bug
    • Status: Short Term Backlog (View Workflow)
    • Low
    • Resolution: Unresolved
    • 2.4.4, 2.5
    • None
    • Directory - LDAP
    • None

    Description

      The incremental sync with AD does not play well with duplicate groups. For example:

      1. Set up an AD with multiple groups with the same CN.
      2. Do a full sync. Note the group is ignored because the sync detects multiple groups (as was implemented in CWD-2504).
      3. Add a user to one of the groups and do and sync again.
      4. (BUG) The group you changed will now appear in Crowd.

      The problem is that the incremental sync will only see the group that changed and incorrectly assume that there is now only one group.

      1. Restart crowd and sync again. This will be a full sync.
      2. The group will have again disappeared from Crowd because the full sync again detects the duplicate groups.

      So basically when Crowd does a full sync it will make a duplicate group disappear. However, the duplicate group may appear if one of the two groups is changed before an incremental sync.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              bbain bain
              Votes:
              1 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated: