The SBC uses three configurations uses to sync data from remote server that are configured in the AD Profile:

 

  • Manual Sync – A request based CLI option is provided to trigger a manual sync request. As a precondition, the AD Profile sync attribute should be enabled. Manual Sync will not change any of the delayedSync or syncInterval logic. syncInterval will kick in only after a successful sync due to delayed sync.

  • Delayed Sync – This is a date and time string parameter. This value should always be greater than current system time during configuration. So, when the system time is equal to the configured date and time, the SBC will trigger to fetch the data from the remote AD server. As a precondition, AD Profile sync attribute must be enabled. If delayedSync fails to sync, then the SBC retries the sync operation after 1 minute of the failure. To stop the syncing operation, the user can disable the sync parameter in the AD Profile.

  • Sync Interval – The value is in the range of 60 minutes to 43200 minutes (30 Days) . This is triggered only after a successful sync due to delayed sync configuration. This syncInterval will trigger sync operation in regular intervals.

Command Syntax

The adProfile is added to the CLI.  Execute the following command to configure adProfile.

% set profiles adProfile <DEFAULT_AD_PROFILE> sync <disable/enable> delayedSync <Time> syncInterval <time> applyNormalization <disable/enable> adServerList <list> dcServer <server name>

Command Parameters

adProfile Parameters

Flexible ParameterLength/RangeDefaultDescriptionM/O
adProfileNADEFAULT_AD_PROFILEAD Profile nameM
adServerList1 - 32NAConfigure AD servers to sync dataM
applyNormalizationdisable/enabledisableNormalize the data received from AD ServerO
delayedSyncNANA

Delayed sync for the specified duration. Format: YYYY-MM-DDTHH:MM:SS.

The date and time value should be greater than the current system time.

M
syncdisable/enabledisableEnabling or disabling of sync operation with AD serverO
syncInterval60 - 4320060Input the Periodic Sync Interval Timer in MinutesM

Command Example

The following is an example command of how to create an AD Profile.

set profiles adProfile DEFAULT_AD_PROFILE sync enable syncInterval 1440 delayedSync 2019-03-07T23:59:00 adServerList 1 dcServer ADSERVER1


The following example shows how to trigger manual sync:

request system admin <systemName> adManualSync

  • No labels