• State Verified Answer
  • Replies 4 replies
  • Subscribers 95 subscribers
  • Views 1423 views
  • Users 0 members are here
Options
Related

LDAP Syncing only one user / group

Neil R
over 2 years ago

Hi.  I've set up a test sync from an LDAP instance into OI, but only a single user and group syncs.  I've tried moving additional users into new containers but no joy.  The sync is working (changing the properties of the working user syncs across ok), and when I changed the target scope to all containers (previously it was only the container with the users), all the new default users and containers synced.

The missing users are all identical to the working one (all created with the same PS cmdlet) and when I browse the structure in the Target System browser (allowing restriction of containers) the users appear there fine.  The one exception is that the working user is a member of the working group.

I've tried resetting the revisions, recreating the sync job all to no avail.

Any suggestions about where to check next please?

Thanks

Parents
  • +1 over 2 years ago

    Hi Neil,

    Try enabling/configuring trace logging to see if the logs give any clues.

    See below.

    HTH, Barry.

    Trace Debug Connector/Sync Issues

    Add these lines to globallog.config or stdioprocessor.exe.config:           

    Find StdioProcessor.exe.config in your job server installation dir.

    Add the below lines:

           <rules>

                  <!-- Debug logger definitions for trace log -->

                  <logger name="SystemConnector" minlevel="Trace" writeTo="debug"/>

                  <logger name="*" minlevel="Trace" writeTo="debug"/>

           </rules>

     

      <nlog autoReload="true" xmlns="http://www.nlog-project.org/schemas/NLog.xsd" xmlns:xsi="">www.w3.org/.../XMLSchema-instance">

        <variable name="appName" value="StdioProcessor"/>

        <include file="${basedir}/globallog.config" ignoreErrors="true"/>

    ================== just here in the file ======================

      </nlog>

    Then save it and run again ……. Whichever user the js runs as go to c:\users\<jsuser>\appdata\local ……….. and keep going to one identity manager …. Then stdioprocessor …. Then debug.

    You should get a trace log/debug file in there.

  • 0 over 2 years ago in reply to Barry Jackson

    Thanks very much for this.  Traced the sync in the logs the following day and strangely everything went through with no changes made except restarting the service after adding the above.  I'll keep this in my toolkit if it happens again!

  • 0 over 2 years ago in reply to Neil R

    Nice ..... but be sure to remove/comment out the trace logging when not in use as those logs can get very large very quick and are not subject to the log management settings.

Reply Children
  • 0 over 2 years ago in reply to Barry Jackson

    Looks like a I spoke too soon :D  I created another user and it's not syncing again.  There are no jobs stuck in the queue ( I watch all the processes complete) and when I look at the Debug log file ImportUser1-5 are all displayed doing various things, but the new one (ImportUser6) doesn't appear at all.  But it's there if I use ADSI edit, and when I browse in the Target System \Scope browser it's clearly shown in the container with the rest.  

    Any more clues I can use please?

    Neil