Here is another issue Fabio,- create a new User->Normal syncope attribute called groups (see Selection_112.png) - Resources -> uforge_resource -> User mapping add USER | UserSchema | groups | ldapGroups | .... | BOTH as you suggested (see Selection_113.png) "Save"As per the previous email .... really strange behavior. Btw, looking at your attachments I can see three mappings for groups attribute (two perfectly equals).
oops I added these just to see what happens if I added duplicates ... I will delete 2 straight away ;-)
- Resources -> uforge_resource -> User mapping. The change is no longer there! (see Selection_114.png) WRT to suggestion GROUP | RoleSchema | groupDN | ldapGroups | ... | BOTHFor roles, you don't need to propagate ldapGroups. It has to be used just for memberships and not for role provisioning. You have to remove ldapGroups items from Rolle Mapping.
Ok will do. rgds, Nik
