"Refresh from LDAP" link on the User and Group forms will error when the LDAP server is configured to use a mid server even when normal imports work correctly

1. Ensure you have configured an LDAP server that uses a Mid server.
2. Open a record that has been imported by the LDAP
3. Click "Refresh from LDAP"

You will see an error:

Group <group name> Could not be found in LDAP

 

The "Refresh from LDAP" functionality is not supported if the LDAP is configured to use the mid server. Please note the normal imports using the data sources will work correctly.

To avoid this limitation, you can remove the "Refresh from LDAP" link. To achieve this, open the UI Action from the sys_user/sys_user_group and change the conditions"

Open the following UI Actions:

• sys_ui_action.do?sys_id=1b4f7ef30a0001060058e223c9a5744c
• sys_ui_action.do?sys_id=7f212bab0a0a0b9e00c952de6a4c89d6

Change condition to:
!current.source.isNil() && gs.hasRole('admin') && current.ldap_server.mid_server.isNil()