debugging and console ouput

[cforce]

We lossing group memberships for users on every login and can't explain and how this descion is made based on our ldap sync config.
Is there andy debugging ouput which logs what and why its it syncec (create, udate; remove, deactivate, added,..)

[thorin]

No, you only get some output by running the synchronization with rake.

The only way a user can loose a group is:
That group exists on ldap but the plugin can't find a connection between the group and the user.

So the groups synchronization is done in four steps:

1. Searchs ldap for groups matching does the user currently belongs to on remine (these will be candidates for removal)
2. Searchs ldap for groups to which the user currently belongs to on ldap (these will be candidates for addition)
3. Removes the groups candidates for removal that weren't found on step 2.
4. Adds the groups candidates for addition that weren't found on step 1.

If you have nested groups enabled it adds an extra step that updates the groups found on step 2.
These feature hasn't been much tested and it might be failing and loosing groups.

[Utopism]

Hi I have added a pull request with some enhancement, and I have added some traces.
I fixed an issue about losing groups too.

[thorin]

cforce if you want you can try utopism's code. And give some feedback.

Sorry but it will take me some time to review his code and merge it.

[cforce]

any news on that?

[thorin]

Please have a look at the branch 2.0.beta.