CrashPlan User Directory Sync release notes

This article applies to CrashPlan Enterprise and MSPs.png


This page lists new features, enhancements, and bug fixes for CrashPlan User Directory Sync (UDS)

For the CrashPlan cloud, see CrashPlan cloud release notes.

For articles about CrashPlan User Directory Sync, see CrashPlan User Directory Sync resources.


Version 1.6.4

February 2, 2022

  • Updated CrashPlan User Directory Sync to Apache Log4j version 2.17.1 to further mitigate CVE-2021-45105CVE-2021-44832, and CVE- 2021-45046To protect your installation from this vulnerability, upgrade CrashPlan User Directory Sync to version 1.6.4
  • Improved error messages to more clearly specify where the issue lies (for example, with LDAP, scripting, or SCIM processing) when a problem causes the CrashPlan User Directory Sync to terminate early.    
  • Fixed a problem that incorrectly identified the LDAP query as responsible for errors in other parts of the software.  
  • Removed the default value of the scim.baseurl configuration property to prevent users from erroneously using the default value rather than entering their own value.   

Version 1.6.3

December 15, 2021

Version 1.6.2

May 5, 2021

  • Added the userCertificate attribute to the list of default attributes in the ldap.schema.attributes.sensitive configuration property. As a result, certificates are ignored for scripting and are omitted in logs.  
  • Performance and stability improvements.  

Version 1.6.1

March 4, 2021

  • Added new properties in the file:   
    • missing.user.scrub.enabled : Determines whether to remove users from mapping when the missing.user.scrub.threshold value is exceeded. 
    • missing.user.scrub.push: Determines whether empty user data should be pushed to CrashPlan when performing the user removal authorized by the missing.user.scrub.enabled setting. This effectively removes (or scrubs) the user's data that had previously been sent to CrashPlan. 
    • missing.user.scrub.threshold: Determines how many times a user must be absent from the directory service before removing the user from mapping. 
  • Improved handling of users without a first name or a last name provided in CrashPlan.  

Version 1.5.2

November 23, 2020

  • Adds new properties in the file:
    • ldap.attrib.dateformat: Specifies the date format that should be returned for the "When Changed" dates. The new property accepts a Java date format string. The default is configured for compatibility with Microsoft Active Directory. 
    • ldap.schema.attributes.returnattributes : Specifies which user attributes will be explicitly returned in the query results. The new property defaults to a value of "*,+" which returns all attributes. However, specific attributes can be specified in a comma-separated array of attributes or wild cards. 
  • Introduces support for the the IBM "Blue Pages" directory service.  

Version 1.5.1

August 13, 2020

  • Corrects an issue where selecting the NONE value for the ldap.bind.authtype UDS configuration property did not result in anonymous binding. In addition, the STRONG value is removed from the list of valid values for the property. 
  • Improved handling of directory services that don't support paging controls.  
  • Improved handling of success codes during missing user deactivation. 
  • If you use CrashPlan User Directory Sync version 1.5.0 or earlier with the missed.user.check=true configuration property, the User Directory Sync logging does not show that users were deactivated. To fix this issue, upgrade to the latest version of CrashPlan User Directory Sync (version 1.5.1 or later). 

Version 1.5.0

March 18, 2020


  • New properties in the file:
    • ldap.connection.allowunsafecerts : Allows for self-signed certificates.  
    • scim.client.threads : Sets the number of processing threads to use during synchronization.  
  • New --changed-since flag for the C42UserDirectorySync executable that synchronizes all users who haven't been updated since the specified date.  
  • Faster synchronization through the introduction of multi-threaded processing.  
  • Faster queries for missing users. 
  • Improved log messaging. 
  • Fixes an issue where installation of the embedded JRE incorrectly overwrote the existing JAVA_HOME variable.  
  • Known issue: If you run a synchronization with the the scim.client.threads property set to a value higher than 1, and you use org scripts to automatically create new organizations in CrashPlan, a new organization will be created for each thread, resulting in duplicate organizations. To work around the issue, you must create all the organizations needed by users before running a synchronization.   

Version 1.4.0

December 19, 2019

  • Makes the following enhancements to the file:
    • Adds the following Active Directory employee attributes for mapping to CrashPlan: ManagerCityState, and Country.  
    • Adds a description and the default value for each property. The descriptions can be toggled to be displayed or hidden. 
    • Displays previously hidden properties. 
  • Provides an explanation of the error in the Run Summary log when a UDS sync or dry run fails to complete. 
  • Fixes the following issues:
    • Searches that included an "or" clause in the filter caused the search to loop without completing.  
    • LDAP validation results were not properly logged when the --trace flag was run. 
    • A query for for a multi-valued attribute (such as memberOf) returned an error when the attribute contained more than 1,500 values. 
    • An attribute size of zero generated an exception error. 

Version 1.3.0

October 15, 2019

  • Corrects an issue in which the UDS connection to the Active Directory server timed out due to a full work queue. PL-84190 
  • Returns an array for multi-valued items (like MemberOf) even when there's only one value in the array. PL-84138
  • Adds the following Active Directory employee attributes to the file for mapping to CrashPlan: TitleDivisionDepartment, and Employee Type.  
  • Completes a dry run even if the SCIM service is unavailable. 
  • Provides support for Active Directory 2016. 
  • Adds upgrade instructions to the readme.txt file provided with UDS. 
  • Uses the objectGUID attribute for user UIDs because it is a unique ID in Active Directory. If you configure pre-1.3.0 versions of UDS to use the objectSID for user UIDs, the UDS automatically manages the ID translation. PL-82745
  • Corrects an issue in which spaces were not allowed in paths. Spaces can now be used in UDS directories, scripts, and program file names. 
  • Improves dry run results output. 
  • Provides the URL to the configured LDAP server in the LDAP connection log. 
  • Performance and stability improvements. 

Version 1.2.0

July 11, 2019

  • Adds the ability to view the version of User Directory Sync in use. 
  • Adds the ability to map which LDAP attributes are used by User Directory Sync to provision and update CrashPlan user information. 
  • Now performs a "changes-only" sync when using either the default search or a custom search filter. 
  • Provides more detailed information during dry-runs, including attribute mapping and script results for each user. 
  • Introduces the option to run a full sync on demand with a new optional flag.    
  • Offers improved error messaging, including: 
    • usererror.log that contains dry-run results and user errors during live syncs.
    • The scripts and the associated line number when the Active, Role, or Org script causes a sync to fail.  

Enhancements and updates

April 16, 2020

  • Allows the Deactivation Delay setting to be edited for CrashPlan User Directory Sync providers in the CrashPlan console. Click the edit icon to set the length of time to delay deactivation after synchronization is performed.  
  • Displays additions, updates, and removals for all user attributes in the provisioning Sync Log. In addition, all Organization attribute values displayed in the Sync Log now include the orgId of the organization, and all Manager attribute values now include the userId. 

Bug fixes

February 27, 2019

  • Corrects an issue in which CrashPlan User Directory Sync could incorrectly indicate in the Sync Log that a username changed if the user's email address contains uppercase letters. 
  • Directory sync notification emails now stop sending if your CrashPlan User Directory Sync license expires.  
Was this article helpful?
0 out of 0 found this helpful

Articles in this section