These notes apply to v2.2.1 of 2017-08-30.
New Features
#266: Extended attribute values (defined in extensions) can now be multi-valued. The type of the attribute value in the source_attributes dictionary will be:
Noneif the attribute has no value;- a
str(orunicodein py2) if the attribute has one value; - a
listofstr(orunicodein py2) if the attribute has multiple values.
#268: To make sure users get all the right overlapping entitlements associated with mapped user groups, --strategy push now does group removals before group adds.
Bug Fixes
#257: Catch exceptions thrown by umapi-client when creating actions.
#258: Correctly decrypt private keys in py3.
#260: Make sure the requests library is loaded when using pex on Windows.
#265: Extended attributes in extensions couldn't be fetched unless they had non-ascii names.
#269: When using --strategy sync, new users created in secondary organizations were not being added to any groups.
Compatibility with Prior Versions
There are no functional changes from prior versions.
Known Issues
Because the release on Windows is built with a pre-compiled version of pyldap, we have to specify a specific version to be used in each release. This not always be the latest version.
On the Win64 platform, there are very long pathnames embedded in the released build artifact user-sync.pex, which will cause problems unless you are on Windows 10 and are either running Python 3.6 or have enabled long pathnames system-wide (as described in this Microsoft Dev Center article). To work around this issue on older platforms, set the PEX_ROOT environment variable (as described in the docs here) to be a very short path (e.g., set PEX_ROOT=C:\pex).
On Win64, this release was built with and is only guaranteed to work with Python Win64 2.7.13. We have had reports that it will not work with Python Win64 2.7.14, recently released. Earlier Win64 versions of Python have been observed to work (in particular, 2.7.9 and 2.7.12).