hi, we recently experienced similar and found it to be user cache. there
is a setting in the ldap config which allows you to specify the cache
value. however, i found this to take no effect and eventually set a hard
eviction rate to the configuration in the standalone-ha.xml for user cache.
On Fri, Mar 16, 2018 at 11:48 AM, Lahari Guntha <lahari.guntha(a)tcs.com>
wrote:
Hi All,
We are using keycloak of version 3.3.0.CR2.
I have my Keycloak integrated with LDAP.
I have configured many applications to have SSO with Keycloak. I have
done all the configuration to have LDAP integration with Keycloak. I have
also configured Group mappers so that groups from LDAP are also synced to
LDAP.
eg:
Users in LDAP: "user1"
Groups in LDAP: "group1","group2"
When i login into one of my application that is configured to have SSO
with keycloak with user "user1" that is present in group
"group1"...that
user entry gets shown in the Keycloak UI page and we can also see the
groups mapped to it.
Now I add the user "user1" into another group "group2"...
But now the newly added group is not reflected when click on User> Group
Mapping.
Why Is this happening??
What is the solution to continuously sync the users with the groups they
are present in/added newly automatically????
Thanks,
Lahari
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user