How to make ldap syn autimatically ?

[barrykfl]

I found it wokr only on first start ans loading much time …around 1000 users account ..etc ? any idea make force sn automatically? enlosed my configure

ldap.authentication.active=true
ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=uid=%s,cn=users,cn=accounts,dc=bbc,dc=com
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://ldap.bbc.com:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.defaultAdministratorUserNames=uid=admin,cn=users,cn=accounts,dc=bbc,dc=com
ldap.synchronization.active=true
ldap.synchronization.java.naming.security.authentication=simple
#ldap.synchronization.java.naming.security.principal=cn\=Directory Manager,dc\=bbc,dc\=com
ldap.synchronization.java.naming.security.principal=uid=ldap,cn=users,cn=accounts,dc=abc,dc=com
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.queryBatchSize=0
ldap.synchronization.attributeBatchSize=0
ldap.synchronization.groupQuery=(objectclass\=groupOfNames)
#ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=groupOfNames)
ldap.synchronization.personQuery=(objectclass\=person)
ldap.synchronization.personDifferentialQuery=(&(objectclass\=person)
ldap.synchronization.groupSearchBase=cn=groups,cn=accounts,dc=abc,dc=com
ldap.synchronization.userSearchBase=cn=users,cn=accounts,dc=abc,dc=com
ldap.synchronization.groupIdAttributeName=cn
ldap.synchronization.groupDisplayNameAttributeName=description
ldap.synchronization.groupType=groupOfNames
ldap.synchronization.personType=person
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=ou
#ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.java.naming.read.timeout=0

[mrogers]

Both of your differential queries are missing time stamp comparison.

[barrykfl]

even i make time stamp differential by uncoomment it the same result….orginaly i tried emable full syn mode so it will alwasy syn …but
now seem the cron schedule not work .the add action work , but auto delete not work .nothing happen by schedule

ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'Z'
ldap.synchronization.userIdAttributeName=uid
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=ou
#ldap.synchronization.defaultHomeFolderProvider=largeHomeFolderProvider
ldap.synchronization.enableProgressEstimation=true
ldap.authentication.java.naming.read.timeout=0
synchronization.synchronizeChangesOnly=true
ldap.synchronization.modifyTimestampAttributeName=whenChanged
synchronization.syncOnStartup=true
#synchronization.import.cron=0 0/4 * * * ?
synchronization.import.cron=0 0/5 9-18 ? * MON-FRI
synchronization.allowDeletions=true
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.autoCreatePeopleOnLogin=true

[kimberlydeborah]

With Google Apps Directory Sync, you can automatically provision users, groups, and non-employee contacts based on the user data in your LDAP server, such as Microsoft Active Directory or Lotus Domino.