LDAP Sync doesn't refresh group memberships in AEM when user is removed from LDAP group

[hl_20]

Hi,

I have setup an AEM instance with LDAP to sync users and groups to AEM. Sync is working fine and syncing users and their respective groups as defined in the group filters. I need to remove a user from a synced group in AEM when the user is removed from LDAP group. I have set "Group Expiration Time"  value, but this doesn't seem to work and doesn't remove user from AEM group after specified time. Is there any other configuration needed here?

[Sham_HC · Accepted solution]

No other configuration is required. When user is removed from ldap its membership will not be reflected in crx group immediately at that point. The group membership becomes eventually consistent once another user/same user logins after cache expiration.    Cq 5.3 had this issue & you should have hotfix for this. Any latest aem version should not have such problems.

[hl_20]

Thanks Sham. This has been resolved now.

[pavank8292442]

Hi Harshl,

  How did you get the Group sync get it work? could you please send me the snapshot of config that you have?

I am attaching mine

thanks

pavan

[kavithap4977708]

Please could you update the configuration syou have. How it got fixed. We are having same issues. When LDAP groups is removed the user still exists within AEM with everyone role. How do we delete user when he is not longer in LDAP.