title: Keycloak role-ldap-mapper sync
body: <p>I am struggling with the keycloak role-ldap-mapper. We have an Active Directory Service internally where Users can ask for roles. Roles are assigned/removed by another tool and saved into the memberOf Attribute in AD.
  Keycloak imports the roles correctly at the users first login, but somehow when the user is already there, roles are updated in AD, they are not synchronized to Keycloak. I just want roles to be synchronized regularly from AD to Keycloak, not the other way around (I am not supposed to write into the AD).
  Is it a Bug? Works as Designed, or am I configuring something in the wrong way?</p>
  
  <p>I am running 2 instances, Version 3.1.0 and 3.4.1.</p>
  
  <p>I already played around with the LDAP - periodic synchronize changed/full feature but no success.
  Do I have to specify the memberOf Attribute somehow specifically to be synchronized?</p>
  
  <p>Thx for help.</p>
  
  <p><a href="https://i.stack.imgur.com/rvY4U.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/rvY4U.png" alt="Role Mapper"></a></p>
  
  <hr>
  
  <h2>Solution found:</h2>
  
  <p>I have updated Keycloak to the newest Version (3.4.3). Now it works for me. Seems to be an issue in the previous versions.</p>