# Openshift\_adm\_groups\_sync does not sync users from ldap groups

**URL:** <https://forum.ansible.com/t/openshift-adm-groups-sync-does-not-sync-users-from-ldap-groups/2466>\
**Category:** Get Help\
**Tags:** collections\
**Created:** [November 20, 2023, 12:29pm UTC](https://forum.ansible.com/t/openshift-adm-groups-sync-does-not-sync-users-from-ldap-groups/2466 "2023-11-20T12:29:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dkoci](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dkoci/32/815_2.png) [@dkoci](https://forum.ansible.com/u/dkoci)\
**Post date:** [November 20, 2023, 12:29pm UTC](https://forum.ansible.com/t/openshift-adm-groups-sync-does-not-sync-users-from-ldap-groups/2466/1 "2023-11-20T12:29:19Z")

</div>

Hi.  
I would like to sync groups of users from ldap to openshift. I tried openshift\_adm\_groups\_sync module which creates empty groups (without users). Does anyone use this modul, because I cant find the issue? I use the same group-sync.yaml file for years and it works fine. But with openshift\_adm\_groups\_sync users from ldap groups are not synced. Only empty groups are created so the issue is not with the ldap access.

---

<div class="post-metadata">

**Author:** ![atul\_mohan](https://avatars.discourse-cdn.com/v4/letter/a/f04885/32.png) [@atul\_mohan](https://forum.ansible.com/u/atul_mohan)\
**Post date:** [December 29, 2024, 2:40am UTC](https://forum.ansible.com/t/openshift-adm-groups-sync-does-not-sync-users-from-ldap-groups/2466/2 "2024-12-29T02:40:55Z")

</div>

```auto
kind: SyncIdentityProvider
apiVersion: config.openshift.io/v1
metadata:
  name: group-sync
spec:
  identityProvider:
    name: LDAP
    mappingMethod: add
    type: LDAP
    ldap:
      url: "ldap://your-ldap-server:389" # Replace with your LDAP server
      bindDN: "cn=admin,dc=example,dc=com" # Replace with your Bind DN
      bindPassword:
        name: ldap-bind-password # Ensure this secret exists in the same namespace
      insecure: true # Set to false if using LDAPS
      attributes:
        id: "uid" # Unique identifier for users
        preferredUsername: "uid"
        name: "cn"
        email: "mail"
      groupUID: "cn" # Unique identifier for groups
      groupName: "cn"
      groupMembership:
        - "memberUid" # Replace with your LDAP's group membership attribute
  mode: EnsureExists

```