RocketChat / RocketChat/Rocket.Chat
LDAP Group Sync issue
Open
Nobody has claimed this yet.
area: authentication
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
When LDAP groups are synchronized and "automatic removal of users from channels" set to "true", existing users in channels are deleted and added again + new employees. And so constantly, in a circle, every synchronization. User roles are working correctly!
Steps to reproduce:
- go to settings LDAP > Sync and enable ldap group sync
- Click set automatic removal of users from channels are synchronized to True
- and see any channel for logs: User left channel and User joined to channel.
Server Setup Information:
- Version of Rocket.Chat Server: 2.1.1
- Operating System: Debian Stretch 9.11
- Deployment Method: tar
- Number of Running Instances: 1
- DB Replicaset Oplog: -
- NodeJS Version: 8.11.4
- MongoDB Version: 3.6.14
Client Setup Information
- Desktop App or Browser Version: 2.15.5
- Operating System: Windows 10 x64
Additional context
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing LDAP group synchronization with automatic removal of users from channels enabled, using the reported server and client setup as context. Trace the repeated leave-and-join behavior during synchronization; done when existing channel members are not removed and re-added on every synchronization while role handling remains correct.
Written by the indexing model from the issue text.
Assessment
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100