Security Guide

10.2.1
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0
- 10.2.2 HotFix 1
- 10.2.2

Back Next

Step 3. Schedule the Synchronization Times

You can set up a schedule for the Service Manager to periodically synchronize the list of users and groups in the LDAP security domain with the list of users and groups in the LDAP directory service.

Before you start the synchronization process, verify that the /etc/hosts file contains an entry for the host name of the LDAP server. If the Service Manager cannot resolve the host name for the LDAP server, the user synchronization can fail.

During synchronization, the Service Manager imports users and groups from the LDAP directory service. The Service Manager deletes any user or group from the LDAP security domain that is no longer included in the search filters used for the import.

By default, the Service Manager does not have a scheduled time to synchronize with the LDAP directory service. To ensure that the list of users and groups in the LDAP security domains is accurate, you can schedule the times during the day when the Service Manager synchronizes the LDAP security domains. The Service Manager synchronizes the LDAP security domains with the LDAP directory service every day at the times you set.

During synchronization, the Service Manager locks the user account that it synchronizes. When the user account is locked, the Service Manager cannot authenticate the user account. Users might not be able to log in to application clients. If users are logged in to application clients when synchronization starts, the users might not be able to perform tasks. The duration of the synchronization process depends on the number of users and groups to be synchronized. To avoid usage disruption, synchronize the security domains during times when most users are not logged in.

To synchronize more than 100 users or groups, enable paging on the LDAP directory service before you run the synchronization. If you do not enable paging on the LDAP directory service, the synchronization can fail.

To set up a schedule to synchronize the LDAP security domains with the LDAP directory service, perform the following steps:

In the Administrator tool, click the

Security

tab.

Click the

Actions

menu and select

LDAP Configuration

In the

LDAP Configuration

dialog box, click the

Schedule

tab.

Click the

Add

button (+) to add a time.

The synchronization schedule uses a 24-hour time format.

You can add as many synchronization times in the day as you require. If the list of users and groups in the LDAP directory service changes often, you can schedule the Service Manager to synchronize multiple times a day.

To immediately synchronize the users and groups in the security domains with the users and groups in the LDAP directory service, click

Synchronize Now

Click

to save the synchronization schedule.

If you restart the Informatica domain before the Service Manager synchronizes with the LDAP directory service, the synchronization times that you added are lost.

Rename Saved Search

Table of Contents

Security Guide

Security Guide

Step 3. Schedule the Synchronization Times

Step 3. Schedule the Synchronization Times