kimsehwan96 commented on code in PR #827: URL: https://github.com/apache/ranger/pull/827#discussion_r3892945503
########## ugsync/src/main/java/org/apache/ranger/ldapusersync/process/LdapUserGroupBuilder.java: ########## Review Comment: @spolavarpau1 Thanks for the review. That reset works only on servers that actually have those attributes (AD/OpenLDAP). Google Secure LDAP (schema) provides neither uSNChanged nor modifyTimestamp, and a filter on an attribute the server doesn't have matches nothing, regardless of the value. So with delta sync disabled the search returns 0 entries and no users get synced at all. The issue is the presence of the clause, not its value. Verified against Google Secure LDAP: with the clause, 0 entries; without it, all entries. On AD/OpenLDAP the result set is unchanged, so no behavior change. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
