Ldap differential sync is running multiple times in Production

[bhavikp]

Hi Team,

Ldap differential sync is running multiple times in Production Server.
I want ldap diff. sync should be run only once at the scheduled time mentioned below.

Followings are the configuration of ldap.

alfresco-global.properties

### LDAP Full syncronization mode ###
synchronization.import.cron=0 0 20 * * ? 2100
synchronization.syncOnStartup=false

So I want to know why it is running multiple times.

In default-synchronization.properties, the OOTB configuration is as follows:

synchronization.synchronizeChangesOnly=true // That means it is differential sync not full sync

synchronization.syncWhenMissingPeopleLogIn=true // due to this, ldap is running multiple times?

Please give me some suggestion.

Regards,
Bhavik

[mrogers]

synchronization.syncWhenMissingPeopleLogIn=true

Yes.   This will run a sync when a missing person logs in.

[bhavikp]

Hi mrogers,

Missing person from alfresco. Right?
If he/she does not find in alfresco, ldap differential sync will run.
Let me know if I am wrong.

Regards,
Bhavik

[bhavikp]

Hi Team,

Synchronization can be triggered by each of the following events

1. Startup:
    On system startup or restart of the Synchronization subsystem a differential sync is triggered (unless disabled with configuration).

2. Authentication:
    On successful authentication of a user who does not yet exist locally a differential sync is triggered (unless disabled with configuration).

3. Schedule:
    A scheduled job triggers synchronization in differential with removals mode every 24 hours. This can instead by scheduled in full mode if you set the synchronization.synchronizeChangesOnly property to false. The scheduling of this job may also be altered. See Configuration.

We have following conf. in alfresco-global.properties.

### LDAP Full syncronization mode ###
synchronization.import.cron=0 0 20 * * ? 2100
synchronization.syncOnStartup=false

That means disabled when server startup and schedule as per crone expression.
Now how to disable at #2 (Authentication)

Please let me know how to disable ldap sync on Authentication.

[mrogers]

"Please let me know how to disable ldap sync on Authentication."

synchronization.syncWhenMissingPeopleLogIn=false

[bhavikp]

Ok. Great.

One more question.

On successful authentication of a user who does not yet exist locally. What does that mean?

[bhavikp]

Hi Team,

In alfresco-global.properties, I have set following:

authentication.chain=external1:external,ldap1:ldap,alfrescoNtlm1:alfrescoNtlm

Now, I am adding user "bhavik" in ldap registry (not alfresco)
When I login to alfresco with user "bhavik", will it run ldap differential sync or not?

I have set following property as well:

synchronization.syncWhenMissingPeopleLogIn=true

[bhavikp]

I am not getting any input since yesterday.
Can you please provide some thoghts?