Steps to reproduce
- Install OwnCloud server 10.0.10
- Add App LDAP Integration 0.12.0
- Run:
sudo -u apache php occ user:sync “OCA\User_LDAP\User_Proxy”
But have gotten only 459 users instead 46000 - Then I have increased type of data in database “character varying(512)” instead “character varying(255)” oc_ldap_user_mapping COLUMN ldap_dn
- After that I have get all 46K users. Auth is working.
- Daily I run for sync by cron
sudo -u apache php occ user:sync “OCA\User_LDAP\User_Proxy” -m disable -r -c -vvv
Expected behaviour
All disabled users in AD will be disabled in OC
All re-enabled users in AD will be re-enabled in OC
Actual behaviour
Several users have been disabled in OC but some of enabled in AD.
A lot of users disabled in AD but enabled in OC
Server configuration
Operating system: RHEL 7.6
Web server: Apache/2.4.6
Database: psql (PostgreSQL) 9.6.11
PHP version: PHP 7.2.12
ownCloud version: 10.0.10 (stable)
List of activated apps:
Enabled:
- comments: 0.3.0
- configreport: 0.1.1
- dav: 0.4.0
- federatedfilesharing: 0.3.1
- federation: 0.1.0
- files: 1.5.1
- files_external: 0.7.1
- files_sharing: 0.11.0
- files_trashbin: 0.9.1
- files_versions: 1.3.0
- files_videoplayer: 0.9.8
- firstrunwizard: 1.1
- market: 0.2.5
- notifications: 0.3.5
- provisioning_api: 0.5.0
- systemtags: 0.3.0
- updatenotification: 0.2.1
- user_ldap: 0.12.0
Disabled:
- encryption
- external
- user_external
Are you using an external user-backend, if yes which one: ActiveDirectory
LDAP configuration (delete this part if not used)
+-------------------------------+---------------------------------------------------------------------------------------------------------------------------------------+
| Configuration | |
+-------------------------------+---------------------------------------------------------------------------------------------------------------------------------------+
| hasMemberOfFilterSupport | 1 |
| hasPagedResultSupport | |
| homeFolderNamingRule | |
| lastJpegPhotoLookup | 0 |
| ldapAgentName | CN=user,OU=ServiceAcc,OU=service,DC=dp,DC=*****,DC=** |
| ldapAgentPassword | *** |
| ldapAttributesForGroupSearch | |
| ldapAttributesForUserSearch | |
| ldapBackupHost | |
| ldapBackupPort | |
| ldapBase | DC=dp,DC=*****,DC=** |
| ldapBaseGroups | DC=dp,DC=*****,DC=** |
| ldapBaseUsers | DC=dp,DC=******,DC=** |
| ldapCacheTTL | 600 |
| ldapConfigurationActive | 1 |
| ldapDynamicGroupMemberURL | |
| ldapEmailAttribute | mail |
| ldapExperiencedAdmin | 1 |
| ldapExpertUUIDGroupAttr | |
| ldapExpertUUIDUserAttr | objectguid |
| ldapExpertUsernameAttr | |
| ldapGroupDisplayName | cn |
| ldapGroupFilter | (|(cn=Domain Users)(cn=********)) |
| ldapGroupFilterGroups | Domain Users;********** |
| ldapGroupFilterMode | 0 |
| ldapGroupFilterObjectclass | |
| ldapGroupMemberAssocAttr | uniqueMember |
| ldapHost | ****** |
| ldapIgnoreNamingRules | |
| ldapLoginFilter | (&(&(|(objectclass=person))(|(|(memberof=CN=Domain Users,CN=Users,DC=dp,DC=*****,DC=**)(primaryGroupID=513))))(samaccountname=%uid)) |
| ldapLoginFilterAttributes | |
| ldapLoginFilterEmail | 0 |
| ldapLoginFilterMode | 1 |
| ldapLoginFilterUsername | 1 |
| ldapNestedGroups | 0 |
| ldapOverrideMainServer | |
| ldapPagingSize | 1000 |
| ldapPort | 389 |
| ldapQuotaAttribute | |
| ldapQuotaDefault | |
| ldapTLS | 0 |
| ldapUserDisplayName | displayName |
| ldapUserDisplayName2 | |
| ldapUserFilter | (&(|(objectclass=person))(|(|(memberof=CN=Domain Users,CN=Users,DC=dp,DC=*****,DC=**)(primaryGroupID=513)))) |
| ldapUserFilterGroups | Domain Users |
| ldapUserFilterMode | 0 |
| ldapUserFilterObjectclass | person |
| ldapUserName | samaccountname |
| ldapUuidGroupAttribute | auto |
| ldapUuidUserAttribute | auto |
| turnOffCertCheck | 1 |
| useMemberOfToDetectMembership | 1 |
+-------------------------------+---------------------------------------------------------------------------------------------------------------------------------------+
