Some users' (users created in portal) membership disappears when groups are imported from LDAP servers

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.2.X EE, 7.0.0 Alpha 1
• Fix Version/s: 6.2.X EE, 7.0.0 Alpha 1
• Component/s: Application Security > LDAP, Security Vulnerability
• Labels:
  • QA-B
  • ee-ts
  • liferay-fixpack-portal-100-6210
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed
• Story Points: 1
• Git Pull Request: https://github.com/daledotshan/liferay-portal/pull/295

1. Set the below properties in portal-ext.properties.
ldap.import.interval=4
ldap.import.method=group
2. Start portal, go to Portal Settings->Authentication->LDAP.
3. Checked "Enabled" ldap and "Import Enabled".
4. Add Microsoft Active Directory Server. I used Base DN "ou=test,dc=mydomain,dc=com"
5. In LDAP server, add one group "usergroup" and one "ldapuser", then assign the "ldapuser" to "usergroup"
6. Click "Test LDAP Connection", "Test LDAP Users" and "Test LDAP Groups" to validate ldap worked. And then save.
7. About waiting for 4mins, you will find "usergroup" is imported into user group and "ldapuser" is created in Users on portal. That is to say, ldap's data import successful.
8. Create one user "hai" in portal and then assign the user "hai" to user group "usergroup"
9. Check "usergroup" members, you will find user "hai" and "ldapuser" are members of "usergroup".

After 4mins, check "usergroup" members.

Actual Behavior
You will find user "hai" was removed from "usergroup".

Expected Behavior
"hai" and "ldapuser" still are members of "usergroup".