Adding user to group fails over LDAP to AD?
I run in to a problem with my Crowd 3.6.0 talking LDAP with my AD server:
If I edit a group to add a user to a group, Crowd says "Update successful" and lists the user as beeing added to the group.
Looking in the AD, the user isn't updated with the group.
After a couple of minutes Crowd syncs with the AD and the user is removed from the group in Crowd.
Crowd's Audit log shows exactly the above: User X added to group Y, Sync started, User X removed from group. (See lower part of the screenshot below.)
However: If I instead edit the user to add a group to the user (i.e. not the user to the group) then the AD immediately gets updated and the group stays on even after Crowd has done its periodic sync. (See upper part of the screenshot below.)
If I remove a user from a group or remove a group from a user, then the AD immediately gets updated and my change survives the next Crowd/AD sync. Behaviour is as expected.
To further confirm this bug I hooked up Wireshark to sniff and get a pcap of the Crowd/AD ldap signalling. I could see that on the 3 things that worked, Wireshark showed immediate/live traffic, whereas on the buggy thing (adding user to group) Wireshark was silent. (Or rather: Crowd was silent, didn't attempt to update the AD with the change.)
