Synchronizing iProcess User Data with the LDAP directory

To synchronize iProcess user data with the LDAP directory:

1. Select the following option from the LDAPCONF Main menu: 

[9] Synchronise

2. If you have not already saved them, you are prompted to save any configuration changes you have made.
3. The following prompt is then displayed: 

Perform Full or Partial Synchronisation or Quit (F/P/Q):

Enter:

— F to perform a full synchronization. This downloads all entries from the LDAP directory which are found by the current search criteria.
— P to perform a partial synchronization. This downloads only those entries which are found by the current search criteria and which have changed since the last synchronization was performed. (Every entry in the LDAP directory is timestamped with both its creation and modification time.)

Note 

On a partial synchronization, entries which have been deleted since the last synchronization are not found by this search, and so are not deleted from iProcess. If iProcess users are removed by setting their <MENUNAME> attribute to NONE, rather than by deleting their LDAP directory entry, they will be deleted from iProcess.

 

Note 

On a partial synchronization, if the LDAP server and the iProcess Engine are hosted on different computers, you must ensure that the GMT times on each computer are the same. If they are not, incorrect data may be down-loaded when a partial synchronization is performed.

This results from the implementation of CR 13245. The synchronization operation now compares the timestamp of the last synchronization (which is recorded from the iProcess Engine’s current time, in GMT format) to the LDAP DIT entry’s modification timestamp on the LDAP server (in GMT format).
— Q to return to the LDAPCONF menu without downloading any user data from the LDAP directory.