Details
-
Bug
-
Resolution: Fixed
-
Major
-
2.3.0.patch
-
None
Description
When PSPNG is provisioning an ldap attribute, it removes values as memberships and groups are deleted, however, the full-sync process will only delete unknown values that match a prefix. This only works completely if all the provisioned values have a common prefix.
When PSPNG has full control of the target attribute, then it should be configurable to delete all unknown values, regardless of prefix.
This should be configurable with:
changeLog.consumer.pspng_attributes.allProvisionedValuesPrefix=*
Attachments
Issue Links
- is parent task of
-
GRP-1900 PSPNG - Patch Grouper 2.4 with recent Grouper 2.3 patches (17-21)
- Resolved