I recently upgraded my testing site from XOOPS 2.0.13.2 to 2.0.14.
The main reason that I upgraded it was because I needed my site to synchronize with Microsoft AD.

The procress went sommthly and successfully sync with my AD.
However, I found a problem, which might be also a security problem, that was, the synchronization only happed once when AD user login at the first time. XOOPS 2.0.14 got user info from AD and stored the info into mySQL database. When user changed information in AD, such as password or email, XOOPS didn't change it at the same time. On the other hand, if users changed their info inside of XOOPS, their info in AD didn't change as well.

Another concern is about the AD user info is stored in mySQL database, and this might be a security issue, since there are two copies of user information.

I am wondering if there is any way to fix the problems.

Sorry for my bad English.

any body?

Please allow some time for us to answer. Remember many people may be working, and some people - depending on time zone - may be asleep