In order to test your LDAP configuration, e.g. after it has been modified, the synchronization attribute of the global ldap tag should be set to “nomodify“. The log file “synchro.log“ can then be analyzed for synchronization actions that would happen with synchronization enabled.