keycloak/keycloak
Ver no GitHubDROP_NON_EXISTING_GROUPS_DURING_SYNC drops groups created by adjacent mappers.
Open
#28.144 aberto em 21 de mar. de 2024
area/ldaphelp wantedkind/bugpriority/normalstatus/auto-bumpteam/core-iam
Métricas do repositório
- Stars
- (34.398 stars)
- Métricas de merge de PR
- (Mesclagem média 6d 19h) (384 fundiu PRs em 30d)
Description
Before reporting an issue
- I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.
Area
ldap
Describe the bug
When configuring multiple "group-ldap-mapper" mappers, and enabling the "Drop non-existing groups during sync" option in any of the mappers, then all groups created by the other mappers will be removed when synced.
Version
24.0.1
Regression
- The issue is a regression
Expected behavior
Groups created by other mappers should be untouched.
Actual behavior
The last group-ldap-mapper to run it's sync will delete all other groups created by other group-ldap-mapper's.
How to Reproduce?
Create two group-ldap-mapper's on a LDAP user federation, and point them to different Base DN's to fetch groups. If "Drop non-existing groups during sync" is enabled on one, or both then they will keep conflicting and deleting each others groups.
Anything else?
No response