keycloak/keycloak
在 GitHub 查看DROP_NON_EXISTING_GROUPS_DURING_SYNC drops groups created by adjacent mappers.
Open
#28,144 创建于 2024年3月21日
area/ldaphelp wantedkind/bugpriority/normalstatus/auto-bumpteam/core-iam
仓库指标
- Star
- (34,398 star)
- PR 合并指标
- (平均合并 6天 19小时) (30 天内合并 384 个 PR)
描述
Before reporting an issue
- I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.
Area
ldap
Describe the bug
When configuring multiple "group-ldap-mapper" mappers, and enabling the "Drop non-existing groups during sync" option in any of the mappers, then all groups created by the other mappers will be removed when synced.
Version
24.0.1
Regression
- The issue is a regression
Expected behavior
Groups created by other mappers should be untouched.
Actual behavior
The last group-ldap-mapper to run it's sync will delete all other groups created by other group-ldap-mapper's.
How to Reproduce?
Create two group-ldap-mapper's on a LDAP user federation, and point them to different Base DN's to fetch groups. If "Drop non-existing groups during sync" is enabled on one, or both then they will keep conflicting and deleting each others groups.
Anything else?
No response