This is a major advantage because, until now, if the value of an attribute was removed, the attribute was deleted in LDAP, and the LDAP sync could no longer find that attribute, so the old value of the attribute remained in grommunio.
However, this behavior does have one drawback. grommunio uses some Exchange attributes that do not exist in a standard LDAP or AD. For example, the attribute: PR_DISPLAY_TYPE_EX. This attribute is required for grommunio to recognize the mailbox type. Since this attribute is not present in a standard LDAP or AD, the LDAP sync deletes the PR_DISPLAY_TYPE_EX attribute from the mailbox, and grommunio no longer recognizes the mailbox type, causing the mailbox to stop working and making login impossible. A similar issue applies to quota attributes, though the mailbox remains usable in that case.
You will see similar error messages in the log:
May 11 09:50:53 email gromox-zcore[2583]: rhost=[1.2.3.4]:0 user=user@kunde.at zs_logon rejected: PR_DISPLAY_TYPE_EX is missing for this user
If the PR_DISPLAY_TYPE_EX attribute is missing, the only solution at present is to disable LDAP sync and manually add the PR_DISPLAY_TYPE_EX attribute to all mailboxes.
The command for this is: grommunio-admin user modify --property displaytypeex=0 MAIL_ADDRESS
I hope this helps someone!
Note that this issue no longer exists with the current version of Grommunio Admin API (1.19.8). See post below.
