Le 03/06/2019 à 15:19, Florian Caillet a écrit : > Soisik, > > In my LDAP source, I've got groups with a lot of members (Thousands). > I would like to synchronize those groups with my LDAP destination. > Only my LDAP source content could change. > > Currently, we synchronize the "member" attribute of this Groups using > FORCE Policy. > But at every change, all the values of the member attribute are updated. > > I think the synchronization should be significantly optimized > generating LDIF that adds "new values" and removes "deleted value". > So I'm looking for a synchronization policy to do that. Currently, the > MERGE Policy only adds "new values".
From the LSC point of view, it would not be a MERGE but a FORCE. The difference is that the FORCE will do a "replace" with all values, and that you want instead "delete"/'add" values. This could be a new configuration option, or a new policy, like "FORCEDELTA" for example. In all cases this could be added to next major version (2.2). -- Clément Oudot | Identity Solutions Manager [email protected] Worteks | https://www.worteks.com _______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-users
