anchor.diff:  $ oadm groups sync --sync-config=rfc2307_config_tolerating.yaml --confirm
   ----
   
  -OpenShift creates the following Group record as a result of the above sync
  +{product-title} creates the following group record as a result of the above sync
   operation:
   
   .OpenShift Group Created Using *_rfc2307_config.yaml_*
  
positive.code:   member: cn=INVALID,ou=users,dc=example,dc=com <1>
    member: cn=Jim,ou=OUTOFSCOPE,dc=example,dc=com <2>
  ----
  <1> This member does not exist on the LDAP server.
  <2> This member may exist, but is not under the base DN in the
  user query for the sync job.
  ====
  
  
negative.code: - jane.smith@example.com
  - jim.adams@example.com
  ----
  <1> The users that are members of the group, as specified by the sync file.
  Members for which lookup encountered tolerated errors are absent.
  ====
  
  [[sync-ldap-active-directory]]
  