Wrong accounts during import being created about redmine_ldap_sync HOT 6 CLOSED

It's normal for it to create all the users.
Although the users that do not belong to the "must be in group" should have
been created locked.

Can you send me the rest of the configuration?
For some reason it must be filtering the users hagbard and hashiwu.

What do you have on group base dn, group name pattern and group search
filter?

from redmine_ldap_sync.

LDAP settings
Groups base DN *: ou=groups,dc=my,dc=de
Group name attribute (group) *: cn
Members attribute (group) *: memberuid
Memberid attribute (user) *: uid
Users objectclass * posixAccount
Groups objectclass * posixGroup
Group name pattern: -empty-
Group search filter: -empty-
Users must be members of: redmine
Add users to group: -empty-
Create new groups: -empty-
Create new users: yes

Not all of my users are created. There are 8 others, that get skipped.

from redmine_ldap_sync.

The problem should be that the
cn=redmine,ou=groups,dc=escape-to-space,dc=de doesn't have the group base
DN: ou=groups,dc=my,dc=de.

Also make sure that all the users are on the base DN you configured on the
LDAP authentication mode.

from redmine_ldap_sync.

Sorry, the Groups base DN is "ou=groups,dc=escape-to-space,dc=de".
I shortend it a bit for this report.
And all users are in the same base DN "ou=people,dc=escape-to-space,dc=de"
which is also configured in the ldap preferences of redmine.

from redmine_ldap_sync.

I definitely should add some log trace to synchronization task.

Just confirm me something. Were the users valleyman and geist created and
locked?
If not do they show up on the redmine group?

A reason why users hagbard and haschiwu might have not been created is that
they might not have valid data according to redmine's user validation rules:

• login - required, 30 chars at most with numbers and letters or '_', '-',
  '@', '.'
• firstname - required,, 30 chars at most
• lastname - required, 30 chars at most
• mail - required, 60 chars at most with the form [email protected],
  (cannot be reused by other user)

For more details have look at the validates on file
/redmine/app/model/user.rb

from redmine_ldap_sync.

Yes, valleyman and geist are locked after creation. And they do not belong to any group in redmine.
I checked the user data regarding the validation rules and noticed that both hagbard and haschiwu
had no email address. After adding an email the users were created correctly and got also added
to the right groups. So anything seems to work properly now.

But yes, some more output in the rake task would help here. Something like "user xxx skipped because
of missing/wrong yyy" would be fine.

from redmine_ldap_sync.