Update and documentation LDAP sync configuration
There are several things we need to update and/or clarify in our EE documentation about LDAP and syncing.
- Depending on the outcome of !78 (merged) we need to document the new configuration option(s) - Cron, etc, and the breaking change.
- Consider deprecating
sync_timeconfiguration in the LDAP configuration. Contrary to the name, it does not affect when LDAP worker syncs. It affects how often GitLab checks LDAP to verify the user is still valid. This defaults to 1 hour but is configurable in EE. A more appropriate name in my opinion would be 'cache_time' or 'check_time' or something similar. We actually got a support request where a user expected this configuration to affect the sync worker. We can safely deprecate this (but keep for now) and add a new one without breaking any users.
- Document the LDAP Sync worker in EE. (Updates existing users, blocks users that are disabled or removed from LDAP, runs once per day by default but configurable, etc.)
If we change something with number 2 we will need to create a corresponding omnibus issue.