Video Screencast Help

How do I change the directory syncronization time?

Created: 22 May 2013 • Updated: 29 May 2013 | 5 comments
This issue has been solved. See solution.

I'm trying to figure out how one can change the timing for when the universal server synchronizes with the AD groups for the consumer directory synchronization functions. I don’t see anything about this in the documentation. I noticed that it seems to be set to 12 hours by default, estimated this by the wait time for a consumer to be matched into a group via this directory synchronization. I think it's way to long, especially if you want to get something out rather fast. Anyone know how to run this manually and or alter the timing that it synchronizes?  I’m assuming it has to be a Linux command that needs to run on the server. Please help. Thanks.  

Operating Systems:

Comments 5 CommentsJump to latest comment

Alex_CST's picture

Well this is interesting.  I was getting SSH access into my test universal server to have a look at the documentation inside var/lib/ovid/customization - but it's not there.  I wonder if they removed it for the latest Universal Server release.  Big shame that - I don't think the policy update heartbeat time is related to directory sync.  I'm gonna speak to tech support

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

SOLUTION
Japke's picture

It is possible to tune the directory synchronization settings by adding two additional lines to the /etc/ovid/prefs.xml file on PGP UN / SEMS. You can set the sync-interval to a value in seconds between 60 – 172800 (from 1 minute to 48 hours). However since this is a modification to the server via a command line, I am not sure if I can post this here on the forums. (see the snippet below).

But when you create a case with the Symantec tech support and ask them about the internal KB article TECH192702 "HOW TO: Tune Active Directory Synchronization interval in PGP Universal Server" you should get all the information and assistance that you need.

Any changes made to the PGP Universal Server via the command line must be:
- Authorized in writing by Symantec Technical Support or published as an approved and documented process on the Symantec Knowledge Base.
- Implemented by a Symantec Partner, reseller or Symantec Technical Support.

I am no longer a Symantec employee.

SOLUTION
Alex_CST's picture

Japke,

 

Any idea where I can get some documentation about commands that can be run inside SSH?

Please mark posts as solutions if they solve your problem!

http://www.cstl.com

Japke's picture

Just for everyone's information, I replied privately to Alex about the resources and documentation available to partners.

I am no longer a Symantec employee.

3L3M3NT's picture

Thanks for all this information, I'll open a case then.