Adding new user via NTLM or LDAD Synchronization

Rhulani_Makhubele_(rhulani.makhubele@bcx.co.za_--_

Hello EveryoneIf I have a AD synchronization group for Livelink with about 5000 users in it and have set MaxUsersInGroup=10000, when I run a synch, how do I tell Livelink Directory Services to synchronized only the newly added users (alpha users) into Livelink and not go thru all the accounts into the group?Anyone who has done that before, please share.

Find more posts tagged with

Comments

Appu_Nair

I would say that it is best handled by a time stamp on the LDAP user record.Simply put directory services is just executing a query that a LDAP server understands.Just like in RDBMS calls the ldap records also can be fiiltered by a greater than time stamp or less than time stamp.If you looks at the user record for a user in your ldap you should see operational attributes like createTimeStamp,modifyTimeStamp etc.You should be able to then write a query limiting it based on these time criterion.If you post an LDIF export here for the group more knowledgeable users like Chris Wagg will be able to help you with a query.Other than that livelink tables also contain some but that would be more customizing than for real.Also the oerational attributes take more work than a regular attribute so I don't have an example query to post

Chris_Wagg

Message from Chris Wagg <cwagg@opentext.com> via eLink

eLink

Out of the box the only way to do this will be to use the LDAP read/writesynch, as it is the only one that has this functionality. Obviously ifyou wanted to do some customizing there are ways that would likely work. Appu suggested using the last modified date. This is a good idea, as youcould compare the last synch time with the last modified date, and this wouldgive you all the users that have been added or modified since the lastsynch. Unfortunately I do not know how much work would be involved inimplementing this, it may be so big a change that you would essentially be rewritingDirectory Services.

---------------------------------------
Chris Wagg
Principal Product Specialist
Escalations Support Team
Open Text Corporation
Ph: 800-540-7292
---------------------------------------

From: eLink Discussion:Open Text Content Server Directory Services Discussion[mailto:directoryservices@elinkkc.opentext.com]
Sent: Thursday, July 01, 2010 4:39 AM
To: eLink Recipient
Subject: Adding new user via NTLM or LDAD Synchronization

Adding new user via NTLM or LDAD Synchronization

Posted by rhulanimakhubele (Makhubele, Rhulani S) on 2010/07/01 04:38

Hello Everyone

If I have a AD synchronization group for Livelink with about 5000 users in it and have set MaxUsersInGroup=10000, when I run a synch, how do I tell Livelink Directory Services to synchronized only the newly added users (alpha users) into Livelink and not go thru all the accounts into the group?

Anyone who has done that before, please share.

[To reply to this thread, use your normal E-mail reply function.]
Discussion:	Open Text Content Server Directory Services Discussion
Livelink Server:	knowledge-wlweb01

To Unsubscribe from this Discussion, send an e-mail to unsubscribe.directoryservices@elinkkc.opentext.com.

Appu_Nair

While working on another OT product that involves tying to a LDAP server to create/user groups I see this in the logs(&(&(objectClass=person)(cn=catspec1))(modifyTimestamp>=20100706000710.0Z)(modifyTimestamp<=20100706000810.0Z))To me I read this as give me the user who has cn=catspec1 andbetween those time stamps....As Chris said the OT Dir Svcs may not work exactly for your purpose but I just wanted you to know the syntax for the query if it will help in any way.

Rainer_Meller_(livelink@zadi.de_--_(FIM_Delete))

2 things to consider:* You have to set Unsynchronized User Accounts to Ignore This means you can never delete accounts* Group changes are not always performedFor all those non alpha usersI suggest you set the Log Level to Minimalon "Syncronize now" in ?func=directory.configSyncSourcesThis has a direct effect on the scheduled tasks they will also just log minimal.[Do Jul 01 16:55:00 2010] : Connecting to ldap-server[Do Jul 01 16:55:00 2010] : Synchronization started.[Do Jul 01 16:55:00 2010] : SynchronizeGroups [Pass: 1][Do Jul 01 16:55:02 2010] : Processed 100 groups.[Do Jul 01 16:55:03 2010] : Processed 200 groups.[Do Jul 01 16:55:04 2010] : Processed 300 groups.[Do Jul 01 16:55:05 2010] : Processed 400 groups.[Do Jul 01 16:55:06 2010] : Processed 500 groups.[Do Jul 01 16:55:07 2010] : SynchronizeUsers[Do Jul 01 16:55:09 2010] : Processed 100 users.[Do Jul 01 16:55:11 2010] : Processed 200 users.[Do Jul 01 16:55:13 2010] : Processed 300 users.[Do Jul 01 16:55:15 2010] : Processed 400 users.[Do Jul 01 16:55:17 2010] : Processed 500 users.[Do Jul 01 16:55:19 2010] : Processed 600 users.[Do Jul 01 16:55:21 2010] : Processed 700 users.[Do Jul 01 16:55:23 2010] : Processed 800 users.[Do Jul 01 16:55:26 2010] : Processed 900 users.[Do Jul 01 16:55:28 2010] : Processed 1000 users.[Do Jul 01 16:55:30 2010] : Processed 1100 users.[Do Jul 01 16:55:32 2010] : Processed 1200 users.[Do Jul 01 16:55:34 2010] : Checking for disabled users.[Do Jul 01 16:55:35 2010] : SynchronizeGroups [Pass: 2][Do Jul 01 16:55:35 2010] : Open second connection to directory server for subqueries.[Do Jul 01 16:55:35 2010] : Connecting to ldapserver[Do Jul 01 16:55:40 2010] : Processed 100 groups.[Do Jul 01 16:55:42 2010] : Processed 200 groups.[Do Jul 01 16:55:44 2010] : Processed 300 groups.[Do Jul 01 16:55:46 2010] : Processed 400 groups.[Do Jul 01 16:56:02 2010] : Processed 500 groups.[Do Jul 01 16:56:03 2010] : Checking for deleted groups.[Do Jul 01 16:56:04 2010] : Synchronization completed.You see it only takes a minute for my 1200 users and 500+ groups

pastedImage_0.png