Schedule an incremental IDS synchronization to query the directory server for new and modified user records.
Because incremental synchronizations do not search for deleted user records, they are more efficient than full synchronizations.
Notes:
The MCD contact point can perform queries in one domain or multiple domains, or it can query the Global Catalog (GC) for all domains.
If configured to query the Global Catalog, the MCD connects to the first GC server it finds and then downloads the Partial Attribute Set (PAS). Where possible, the PAS should include the LDAP attributes listed on the Manage IDS Attribute Mappings page. If necessary, amend the schema to include attributes for important (i.e. frequently changed) data.
When an IDS synchronization event is performed, the system searches for LDAP updates from a global catalog server or directory server(s) connected to the MCD contact point. If the connection attempt is unsuccessful, a log message is issued.
Incremental synchronization generates one comparison report in LDAP Data Interchange (LDIF) format:
IncomingDSChanges_<date_timestamp>.ldf — This report contains instructions to modify existing records and insert new records. Records that are not IDS-manageable are ignored.
The comparison report is saved in a well-known folder on the MCD (/db /IDS/LDIF_query_results). Administrators can access the folder using FTP.
By default, the system saves the five most recent comparison reports. To change this setting, update the Maximum_sets_of_IDS_sync_results field in the System Options form.
To create an incremental IDS synchronization event:
Access the Scheduler form.
Use the screen tools (arrows and mini-calendar) to locate the day you wish to update.
Select the day and click Add Event.
Click the Event Parameters tab and complete the following fields:
Title: Type a title for the event. The title can contain up to 255 alphanumeric characters.
Start Date: Use the dialog box to select the Month, Day, and Year that the event is scheduled to start.
Time: Use the dialog box to select the Hour, AM/PM, and Minute that the event is scheduled to occur. Click Set to save your changes.
Repeats: Specify how often you want the event to repeat - Once, Daily, Weekly, Monthly, or Yearly. If you select Daily, Weekly, Monthly, or Yearly, the dialog expands, enabling you to customize the repetition interval.
Click the Activity Parameters tab and complete the following fields:
Select Activity: Select Incremental IDS Synchronization.
Use Global Catalog If Configured: Select this check box to search for a Global Catalog server for all domains. The MCD connects to the first GC server it finds and downloads the partial attribute set (PAS) of LDAP updates from it. If the MCD cannot find a GC server, it searches for directory servers in all domains. Clear this check box to search for directory servers in specific domains (see next setting).
Domain Set: Enter the names of the domains you want to query for LDAP updates. Use commas to separate the entries (e.g. <domain_1>, <domain_2>). Enter "All" or leave this field blank to query all domains for directory servers connected to the MCD contact point.
Sync Type: Select a synchronization type:
Apply Updates—Updates received from the directory server are immediately applied to the MCD. To enable the administrator to track which records have been updated and added, a comparison report is generated in LDIF format.
Detain Updates—Updates received from the directory server are detained on the MCD, where they can then be processed (applied, rejected, etc.) by the administrator. A comparison report is generated in LDIF format.
Compare Only—Updates are not applied to the MCD, but a comparison report is generated in LDIF format.
Sync Records Modified Since Last Successful Sync: Select this check box to query for all updates made since the last synchronization event. Clear this check box to query for updates made since a particular date and time (see next setting).
Sync Records Modified Since Date/Time: Use these settings to query for all updates made from a particular date and time. The dialog boxes facilitate selection of the Month, Day and Year, and the Hour, Minute and AM/PM. This date and time must be earlier than the scheduled synchronization date and time.
Use Default Query String: Select this check box to search for LDAP updates using the Default Query String programmed on the IDS Connection form. The default value is objectClass=user, which causes all user records to be queried. Clear this check box to search for LDAP updates using a particular, non-default query string (see next setting).
Query String: Enter a non-default query string to search for LDAP updates. For example, to search for all users in a research and development department, you may enter "department = R and D". There is no restriction on the type of query string that you enter, provided that it follows syntax rules outlined in RFC 2254. However, bear in mind that only user objects are queried, not invalid objects such as printers.
Click Submit and then OK to save the new event.
The new event is added to the event list.
Note: Following completion of a scheduled synchronization event, check the IDS Data Management form to resolve detained and failed updates. Check the Maintenance and Software Logs to resolve problems with the synchronization process.