Skip to content
Snippets Groups Projects
New issue look: Off

Update and documentation LDAP sync configuration

    • Open Issue created by Drew Blessing @dblessing

    There are several things we need to update and/or clarify in our EE documentation about LDAP and syncing.

    1. Depending on the outcome of !78 (merged) we need to document the new configuration option(s) - Cron, etc, and the breaking change.
    2. Consider deprecating sync_time configuration in the LDAP configuration. Contrary to the name, it does not affect when LDAP worker syncs. It affects how often GitLab checks LDAP to verify the user is still valid. This defaults to 1 hour but is configurable in EE. A more appropriate name in my opinion would be 'cache_time' or 'check_time' or something similar. We actually got a support request where a user expected this configuration to affect the sync worker. We can safely deprecate this (but keep for now) and add a new one without breaking any users.
    3. Document the LDAP Sync worker in EE. (Updates existing users, blocks users that are disabled or removed from LDAP, runs once per day by default but configurable, etc.)

    If we change something with number 2 we will need to create a corresponding omnibus issue.

    cc/ @axil

    Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

    Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

    • slksj
    • flkjslkj
    • lkjfijslkjs
    x = 42
    Edited by Brett

    Designs

      Child items ...

      2. Activity

      Please register or sign in to reply