#1 2010-08-25 21:13:32

**_cquirk_**

LDAP Directory Sync

Anyone know a way to force Connect to sync more than just once a day. The GUI only allows a min. of one day sync. We currently sync at 5am everyday. However, if a student changes their password in LDAP after that, it won't reflect into Connect until the next day. Also, with new students joining the ldap everyday they may have access issues until the next day.

Any customization would be helpful. Thanks. Cor

running 7.5 Sp1 in a clustered environment running Windows Server 2008 R2.

**_tltengineer_**

Re: LDAP Directory Sync

I believe there is a setting that will allow a user who exists in LDAP to log into connect, at which point it will create a profile for that person in connect's database.  That way, even if they are added to LDAP after your sync, they can still log in.

This setting is on the "Driectory Service Settings" tab, under "Authentication Settings"
There is a check box called "Create Connect Pro user account upon successful LDAP Directory authentication" in the section called "User Account Settings."

On our server, we allow LDAP to do the authentication.  Our Connect server does not save the passwords, so I believe the password change after a sync would not stop the user from logging in.

How many users do you have in LDAP?  We have over 60,000.  The sync can take more than 40 minutes to complete.  Occasionally, it will also fail to sync all the accounts properly.  Does your sync go faster/better?