SLK 1.6beta - problems enumerating groups with disabled users

Topics: Developer Forum
Nov 29, 2012 at 4:03 PM

Hi,

We're experiencing a problem when SLK tries to enumerate members of a group which contains disabled user accounts - this fails with the message that the user does not exist. This means we can't easily add new users to existing assignments which are based upon group membership.

We've bodged a solution by creating secondary groups for each primary group containing only enabled user accounts but this is messy:

  • we have to run a synchronisation script daily to update the groups
  • we effectively double the number of groups
  • things still fail if an account is disabled between synchronisation runs

Is there any chance that this could be a warning and for the enumeration to continue since our security procedures mandate the disabling of user accounts when people are on long-term leave / sick or when they leave.

Thanks

Dave

Coordinator
Jan 4, 2013 at 7:50 AM

Hi Dave,

 

I've fixed that in 1.7. However in 1.5 and later there's a configuration option to not include disabled users when enumerating groups.


http://blog.salamandersoft.co.uk/index.php/2009/05/hiding-disabled-users-in-active-directory-groups-on-the-slk-assignment-properties-page/

Richard

SLK Coordinator

http://blog.salamandersoft.co.uk