LDAP sync button error after upgrade to v21 | No SYNC_LOGIN entry
Article ID: 240136
Updated On:
Products
Issue/Introduction
Clicking on the 'Synchronize' button on a user object shows the following message:
Client '0000': LDAP variable 'UC_LDAP_DOMAIN' does not contain a 'SYNC_LOGIN' entry.
Environment
Release : 21.x and above
Component : AUTOMATION ENGINE
Cause
Configuration. Change in behavior in version 21.0.
Resolution
This is a planned change in behavior and the SYNC_LOGIN is now needed in order to utilize the 'Synchronize' button.
Link to the documentation
LDAP Service Availability for Login
In previous versions, the last valid LDAP password was saved in the AE DB to enable a login even if the service was not available at the time. The user passwords saved were also used for the synchronization available in the User object. This behavior is seen as a security issue and is therefore no longer supported.
Now, the LDAP service must be available for the login. Also, to use the Synchronize button in the User object for manual synchronization, a Login object must be assigned. If the LDAP service is not available, the access is denied. For more information, see UC_LDAP_EXAMPLE - LDAP Connection Variable.
Additional Information
Additionally, make sure that the variable DOMAIN_ALIAS is also set in the UC_LDAP_* file in case the Domain is not the same as the Department.
This is also needed on v21 and above
In v21 and above the LDAP settings once correctly specified, should automatically synchronize without the need to run the LDAP Synchronize button.
It's also important to note that when an LDAP user logs in to the AWI, their user information is also synchronized at that time.
Feedback
