In order to test your LDAP configuration, e.g. after it has been modified, the <font inherit/Courier New,Courier,monospace;;inherit;;inherit>synchronization</font> attribute of the global ldap tag should be set to “nomodify“. The log file “<font inherit/Courier New,Courier,monospace;;inherit;;inherit>synchro.log“</font> can then be analyzed for synchronization actions that would happen with synchronization enabled.