Copyright © Cloud Software Group, Inc. All rights reserved.

Synchronizing iProcess User Data with the LDAP directory

To synchronize iProcess user data with the LDAP directory:

1.	Select the following option from the LDAPCONF Main menu:

---

 

[9] Synchronise

---

 

2.	If you have not already saved them, you are prompted to save any configuration changes you have made.

3.	The following prompt is then displayed:

---

 

Perform Full or Partial Synchronisation or Quit (F/P/Q):

---

 

Enter:

−	F to perform a full synchronization. This downloads all entries from the LDAP directory which are found by the current search criteria.

−	P to perform a partial synchronization. This downloads only those entries which are found by the current search criteria and which have changed since the last synchronization was performed. (Every entry in the LDAP directory is timestamped with both its creation and modification time.)

On a partial synchronization, entries which have been deleted since the last synchronization are not found by this search, and so are not deleted from iProcess. If iProcess users are removed by setting their <MENUNAME> attribute to NONE, rather than by deleting their LDAP directory entry, they will be deleted from iProcess.

On a partial synchronization, if the LDAP server and the iProcess Engine are hosted on different computers, you must ensure that the GMT times on each computer are the same. If they are not, incorrect data may be down-loaded when a partial synchronization is performed. This results from the implementation of CR 13245. The synchronization operation now compares the timestamp of the last synchronization (which is recorded from the iProcess Engine’s current time, in GMT format) to the LDAP DIT entry’s modification timestamp on the LDAP server (in GMT format).

−	Q to return to the LDAPCONF menu without downloading any user data from the LDAP directory.

Automating Synchronization

When the iProcess Engine is configured to use the LDAP directory, synchronization with the LDAP directory automatically occurs whenever a MoveSysInfo operation is performed as a result of an LDAPCONF request (which records the time that it last performed a synchronization).

You can automate the synchronization process to perform regular, scheduled updates of user information by using the LDAPCONF MOVESYSINFO command (See MOVESYSINFO), using the Windows at command or a UNIX/Linux cron job.

TIBCO recommends the use of a ‘two-tiered’ update strategy:

•	Perform partial synchronizations on a short timescale (for example, every hour or every day, depending on the frequency with which user information changes).

•	Perform full synchronizations on a longer timescale (for example, every day or every week).

Copyright © Cloud Software Group, Inc. All rights reserved.