Details
-
Improvement
-
Resolution: Unresolved
-
Minor
-
COmanage Registry 2.0.0 (Passing Fad)
-
None
Description
The LdapProvisioner currently pulls all group members when updating a group (if groupOfNames is enabled), even for single member changes. This does not scale to large groups.
Instead, for individual updates the provisioner should add/remove individual members. For a full group sync, use CoGroupMember::findForCoGroup.