Administrator passwords do not get synced with LDAP

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 5.1 EE SP2 (5.1.5), 5.2 EE (5.2.4)
• Fix Version/s: 5.1 EE SP3 (5.1.6), 5.2 EE SP1 (5.2.5)
• Component/s: Application Security
• Labels:
  • 5.2_release_notes
• Environment: All

There is a safety net that allows omni-admins to still login in case LDAP connection breaks (ie there is a typo in the LDAP url). However this causes omni-admins to always skip LDAP binding & syncing so their passwords in the database are never synced with passwords in LDAP.

*Omni-admins are users defined by the "omniadmin.users" property in portal-ext.properties. If this property is empty, then users with the Administrator Role are considered Omni-admins.