DependencyTrack / DependencyTrack/dependency-track

LDAP: Manual Query for Groups Linked to Teams

Open
#1,244 0 comments 1 reaction 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:

Quoting from #643

> LDAP synchronization occurs every 6 hours. It's not performed on-demand.
...
There is currently no way to manually trigger an LDAP refresh. For large directories, it can be a time-intensive task, which is why its not performed on-demand.

A new group that was added to our Active Directory was instantly available in DT 4.3.6 to be mapped to a team. I just had to wait a while (until the next working day) until `LdapSyncTask` picked up the members and my product managers were able to access portfolio management and start triaging vulnerabilities!

### Proposed Behavior:
Add a manual update/refresh button to the Team configuration screen that will refresh the member list of the specific group(s) that are mapped to the Team being refreshed.

![image](https://user-images.githubusercontent.com/4938718/138975791-ea08d67e-cdea-4627-9d99-21fe32648414.png)

Amber = suggested button location
Green = just one group to refresh for this team!

In our organisation we have hundreds of LDAP groups. So, refreshing just one (or a small number) should place a lot less load on the system.

Comment via Slack was that "will need to implement a 'last-sync' construct so that groups are not continuously synced unnecessarily."

### Use Cases
* Rapid onboarding of new employees
* Quicker response to changes for existing employees (ie new product manager can start triaging vulns "straight away"
* Makes testing easier. ie "If I map a brand new group to Team X can they perform desired activity Y?". This would be useful in my environment now that I have a test server that uses snapshot builds.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.