[SYNCOPE-320] Support synchronizing role memberships from LDAP groupOfNames

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Fix Version/s: 1.1.0
• Component/s: core
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 20/Feb/13 12:24
• Updated: 04/Apr/13 14:02
• Resolved: 20/Feb/13 14:44

Description

This task is to support synchronizing role memberships from LDAP groupOfNames. As reported in the following mailing list thread, it is not possible to synchronize role memberships from groupOfNames currently (only groupOfUniqueNames):

http://syncope-dev.1063484.n5.nabble.com/LDAP-Role-queries-td5712875.html

The solution is to update the LDAPMembershipSyncActions to query the Connector for the configured group member attribute. If none is defined, then just fall back to "uniqueMember".

Issue Links

• is related to: SYNCOPE-26 Membership propagation / synchronization