We're experiencing a problem when SLK tries to enumerate members of a group which contains disabled user accounts - this fails with the message that the user does not exist. This means we can't easily add new users to existing assignments which are based
upon group membership.
We've bodged a solution by creating secondary groups for each primary group containing only enabled user accounts but this is messy:
- we have to run a synchronisation script daily to update the groups
- we effectively double the number of groups
- things still fail if an account is disabled between synchronisation runs
Is there any chance that this could be a warning and for the enumeration to continue since our security procedures mandate the disabling of user accounts when people are on long-term leave / sick or when they leave.