Question

Directory Server not showing last datetime of AD sync

Directory Server Version 10

Updated September 25, 2018

asked on September 24, 2018 • Show version history

Hello,

Usually we can see the last time an AD sync occurred on the Laserfiche Directory Server Settings/Identity Providers page. We typically have an "i" graphic we can click on that shows this info. For some reason, it seems Laserfiche Directory server sometimes does not show that "i" graphic so we can not determine the last datetime the AD sync occurred. See screenshot below with red oval... that's usually where the "i" graphic is located. Can anyone shed light as to why this might be happening? Ensuring our AD sync is critical for us when we have questions from users on security access.

If you have some SQL I can run against the LFDS to get this info, that's fine too. We just need to know. We are using Rio version 10.2.

Thanks,

Julie

0 0

Replies

replied on September 24, 2018

For now, you can use the audit reports section to check for the last AD sync time. The simplest way is to filter on the Event Type, Database - Configure AD Sync. It will show you the last synchronization time under event data:

If you get back too many results, you can also filter to only show system processes (which will exclude events like manually clicking synchronize or editing rules):

The icon won't appear if there are not any synchronization events (e.g., a new database), but it sounds like you've used it before, so I have a few questions/troubleshooting steps:

Did any recent synchronization attempts show when you looked at audit reports?
If it's OK to attempt a synchronize, try manually initiating the sync by using the "Synchronize" button.
1. Does that succeed?
2. If so, does the icon appear?
Did you recently upgrade LFDS?

0 0

replied on September 25, 2018

Hi Brianna,

Thanks for the response. I attempted to run the audit report and got an error (see screenshot below). We upgraded LFDS a few months ago. When we force a sync, it can take well over an hour and seems to essentially consume our system resources to where forms do not process. My understanding is that the sync is not incremental but a full sync of all AD groups each time. I manually synced the other day but it did not result in the "i" reappearing :-0. However, we have seen it disappear for a few days and the reappear again.

Given that we have so many AD groups to sync and we cannot sync during the business day without affecting uptime, we would really like a way to schedule the sync to happen in off hours. But in lieu of that option, we are trying to just sync every 24 hours around midnight. Any help is greatly appreciated!

Thanks,

Julie

0 0

replied on September 25, 2018

Given the issues you described, I think it would be best if you contacted your reseller and opened a support case so we can troubleshoot your problem more specifically.

I was suggesting the manual sync as a troubleshooting step; I understand that it's not a viable solution. It sounds like the sync itself succeeds but the problem with the last sync time button showing persists, which is helpful to understand.

0 0

You are not allowed to follow up in this post.

Question

Question

Directory Server not showing last datetime of AD sync

Replies

Sign in to reply to this post.