LDAP settings on a domain is not unique per domain

[Sparc0]

We are using version 4.22.0.0
And we have a bunch of domains like the structure below.

ROOT
   |---Tenant1
   |          |-Tenant1team1
   |          |-Tenant1team2
   |
   |---Tenant2
              |-Tenant2team1
              |-Tenant2team2

Issue is when i change the ldap.search.group.principle for any domain e.g Tenant2team2 same value is set for all other domains even ROOT.
Is it really supposed to be like that?

[DaanHoogland]

no, it isn’t. Only when the global setting is changed it should apply on all Domains that have no explicit setting for it. It reminds me of a prior bug, #11571. but that was UI only. Does it work as expected in the API? if this is UI only it should be solved in 22.1

[Sparc0]

If i list the settings for a domain through the API its the same as webui shows.
Changing the ldap.search.group.principle on a sub-domain and set it to a group i am not part of i lose my access to login.

To me it does not feel like a visual UI only bug.

[DaanHoogland]

clear. @Pearl1594, do you remember if there is a fix for the API out as well? (I cannot find any)

[Pearl1594]

I don't believe there was an API level fix, as when the UI fix was introduced, there wasn't any issue noticed with changing domain level setting (i.e., the change propagating to all domains).

I tried a similar setup - tried, changing the domain level setting for ldap.search.group.principle for tenant1team1 - via UI and API (by passing domainid while doing updateConfiguration) and it only changed it for that domain.