Is there a known problem with ldap group synchronisation in 1.3.2? The synchronisation works fine if it's the user's first login (...if the user is created). XWiki maps all AD groups to XWiki groups like it should. When a admin deletes the user from the XWiki group (without changing anything in the AD) and the user logs in again, XWiki doesn't re-map the AD group membership to the XWiki group membership. I have set: xwiki.authentication.ldap.mode_group_sync=always and for testing purposes: xwiki.authentication.ldap.groupcache_expiration=60 The xwiki.authentication.ldap.group_mapping settings shall be fine, since it works at least for the first login. Or do I have to set any other parameters as well? Thank you in advance! -------- Plus: If the user name contains a blank space (like "AAA BBB") (please don't ask me why.................. ^^), the user itself seems to be created correctly (I can find the user in the "Users" tab in the Administration area), but when I list all members of a group this user belongs to, there are two entries in that list: "XWiki.AAA" and "BBB" (without "XWiki." before)... So there may goes something wrong when creation the relation between the group and the user. -- View this message in context: http://n2.nabble.com/Group-Sync-in-1.3.2---blank-spaces-in-user-names-tp580… Sent from the XWiki- Users mailing list archive at Nabble.com.