Hi there,

I managed to import Users, Roles and membership relation from LDAP into 
Syncope. Now I’m working on the other direction: Propagating information from 
Syncope to LDAP.

It works - to a certain degree:
- propagating users and roles is working (sort of)
- propagating membership information is not working.

For example, I created “user2” and “role2” and assigned “role2” to “user2”. 
When I look into my LDAP I can see:
- cn=user2,ou=users,dc=example,dc=com
- cn=role2,ou=roles,dc=example,dc=com

When looking into the details of cn=role2,ou=roles,dc=example,dc=com I expected 
to see
member: cn=user2,ou=users,dc=example,dc=com

But that was not the case. Somehow Syncope does not propagate the group 
memberships information.
(1) Any suggestions what I have to do to make it work?


(2) Another thing that I don’t understand: When Syncope creates a new Role in 
LDAP, it always looks like this
objectClass: groupOfNames (structural)
objectClass: top (abstract)
cn: role2
member: cn=Directory Manager,dc=example,dc=com

It always sets the Principal that I configured under Resources / Connectors 
(cn=Directory Manager,dc=example,dc=com is) as a member of the group. Why is 
that?

cheers,
Hermann

Reply via email to