Repository navigation
Replies: 2 comments
|
As soon as I posted this, I did a search for all users using the API and the "ID" in the error message is NOT the id in the user_entity table, but rather the mapped attribute LDAP_ID which seems to be a default for KC. Still need to research more on how to fix this issue. Its highly unlikely that Active Directory would have a duplicate ID. |
0 replies
|
So I took one of the users in the error messages, found them in the KC UI and deleted them, then did a re-sync and now I don't have any failed users during sync. 🤷 Hopefully this helps me again in six months when I run into it again. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Posting here because I'm running an older version of KC (the release cadence and breaking changes are hard to keep upgrading). I keep getting these messages during an LDAP sync where it says like
13 users failedand in the logs show these messages:However, I can't find any entry in the
user_entitytable with that ID:It seems that message is coming from https://github.com/keycloak/keycloak/blob/main/federation/ldap/src/main/java/org/keycloak/storage/ldap/LDAPStorageProviderFactory.java#L739 but since I can't find the user in the database, I'm not sure why the error message. I've also checked related tables like
user_group_membershipand still nothing. I've also, configured the LDAP provider to not use a cache, and then tried a sync, but I still get the errors.Any ideas what other database tables this LDAP provider is getting hung up on or anything else to tweak to make the sync clean?
Thanks.
All reactions