I have paid support for Prehensile Tales B.V.

When using LDAP_SYNC_ADMIN_STATUS=true the admin state gets synchronized properly when the user is first created, but existing users do not get their admin state updated when they are added or removed from the admin status group even when LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=true is set.