LDAP Sync Simulation Shows Users to Be Deleted/Modified/Added With Only Administrator Sync Enabled

Products

• VIP Service

Issue/Introduction

While running an LDAP Sync simulation with User Synchronization disabled and only Administrator Synchronization enabled the simulation log appears to show that users may be deleted, modified, or added.

From the EG Console:

From the LDAP Sync simulation log:

INFO  "2025-05-07 17:40:29.258 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=**************************************"
INFO  "2025-05-07 17:40:29.259 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=Number of users added:0
"
INFO  "2025-05-07 17:40:29.261 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=Number of users modified:12
"
INFO  "2025-05-07 17:40:29.262 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=Number of users deleted:400
"
INFO  "2025-05-07 17:40:29.263 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=-------------------Admin Results------------------"
INFO  "2025-05-07 17:40:29.265 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=Number of administrators added:30
"
INFO  "2025-05-07 17:40:29.266 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=Number of administrators modified:2
"
INFO  "2025-05-07 17:40:29.268 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=Number of administrators deleted:0
"
INFO  "2025-05-07 17:40:29.268 GMT+0000" 10.10.10.11 LDAPSync 0 0 0  "actor=LDAPSyncService,op=Synchronization,text=**************************************

Environment

VIP Enterprise Gateway

Cause

An LDAP Sync simulation stores previous results when run in the <EGW_Install_Dir>\LdapSync\services\ldapSync\conf\ldapsync.conf file under the following settings:

ldapsync.mail.simulation.newUsers.count = 0
ldapsync.mail.simulation.modifiedUsers.count = 0
ldapsync.mail.simulation.deletedUsers.count = 0

If a simulation has been run at any point in the past with User Sync enabled these lines of the configuration file will be populated with the results from when it was run. These values are saved so that the simulation can send an email if SMTP has been enabled to deliver the results. These results are only refreshed if User Sychronization has been enabled and a subsequent simulation is run.

Resolution

This is a logging issue that will be addressed in VIP Enterprise Gateway 9.11.2 later this year to only display the administrator results when User Synchronization is disabled. Running the full sync will not affect regular users or cause any impact.