LDAP sync deletes existing users

[lueders]

With Alfresco Community 3.2 (stable) I ran into the following problem:

Users that have been previously created by the 3.1 LDAP sync are being  erased and recreated by the new 3.2 sync.
Does anybody know how to upgrade the old users in a way that they won't be recreated?
Otherwise all group memberships and site permissions would be lost.

01:20:00,145 WARN   [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer]  
Recreating occluded user 'johndoe'. This user was previously created manually or through synchronization with a lower priority user registry.
01:20:00,979 INFO   [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer]  
Retrieving all groups from user registry 'AUTH.EXT.ldap1'
01:20:01,011 INFO   [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer]  Finished synchronizing users and groups with user registry 'AUTH.EXT.ldap1'
‍‍‍‍‍‍‍

[dward]

See http://forums.alfresco.com/en/viewtopic.php?f=9&t=20864&p=68422#p68422

[dward]

FYI a fix for this has now been merged to HEAD (revision 15637). Here's the change comment:

LDAP sync will no longer delete and recreate colliding users and groups in zones that aren't even in the authentication chain.
- Instead such users and groups will be 're-zoned' to the first zone where they were found
- Avoids losing site memberships, etc. on upgrade or change of authentication chain
- Will continue to recreate users and groups from lower priority zones in the authentication chain
- Updated unit tests appropriately

[benswitzer]

Sweet!  That was quick.

[lueders]

Wow! Thanks a lot!

[jsosic]

And how exactly did you set up LDAP syncronization for Alfresco Community? I've installed 3.2r2, but haven't set up any kind of syncronization…

[dward]

Please read http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuration_2

[jsosic]

OK, I did that but I have some minor issues. Here is a description:
http://forums.alfresco.com/en/viewtopic.php?f=9&t=23589&p=77098#p77098