Im syncing our Active Directory Users with Icinga Director. All in all works well. Users are correctly importet and join automatic some groups. The groups are linked with Hosts and Checks in Icinga.
The User dos gets the group alert-XYZ-jdk-version from LDAP (AD). If I delete this membership in the AD User the group is not deleted/synced to the Icinga User. Creation of additional memberships work, modification of memberships work e.g. change alert-XYZ-jdk-version to alert-servers.
For clearitication: Only the last group is not deleted. If the user has 3 groups two are deleted but the last one cant be deleted automaticly via sync job.