Symptoms

When an admin adds a member to a pool that is used in an LDAP AAA object, the changes are not synced properly with Policy Sync. With the Location Specific property enabled, Policy Sync creates a node on the destination device is an error. With the Location Specific property disabled, Policy Sync creates a node on the destination device, but does not create a pool member in the AAA pool.

Impact

Changes to LDAP AAA objects are not synced as expected with Policy Sync.

Conditions

-- LDAP AAA object present in Access Policy -- Access Policy synced with Policy Sync

Workaround

Manually update the AAA pool on the destination device as required.

Fix Information

None

Behavior Change