[keycloak-user] Group LDAP Storage Mapper

Travis De Silva traviskds at gmail.com
Fri Aug 23 02:37:34 EDT 2019


Hi,

Isn't there any way to update the USER_GROUP_MEMBERSHIP table when an LDAP
group mapper period sync runs?

As per a comment from @Marek Posolda <mposolda at redhat.com> in this Jira
comment https://issues.jboss.org/browse/KEYCLOAK-4918 and also by going
over the code in
https://github.com/keycloak/keycloak/blob/master/federation/ldap/src/main/java/org/keycloak/storage/ldap/mappers/membership/group/GroupLDAPStorageMapper.java
line
596, looks like Keycloak will upgrade the LDAP group membership only when
the group mapper is created initially when synced. All other subsequent
calls are not updating the table.

Any idea why this condition is there?

Cheers
Travis


More information about the keycloak-user mailing list