Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-19891

Implement ability to trigger LDAP sync on demand in APS

    Details

    • Type: Improvement
    • Status: Need Info (View Workflow)
    • Resolution: Unresolved
    • Affects Version/s: Alfresco Process Services 1.9
    • Fix Version/s: None
    • Component/s: APS Identify Manager
    • Labels:
      None
    • Bug Priority:
      Category 4
    • ACT Numbers:

      00969815

    • Premier Customer:
      Yes

      Description

      Summary

      APS unlike ACS does not provide a immediate action that can be used to trigger a synchronization of users/groups.
      APS needs a method without having to incur a application restart, for example: either in the IDM or via REST API, for an Administrator user to be able to manually trigger ldap/ad full or differential synchronization action.

      Current Behavior

      Currently in APS, the following steps is how a customer has to manually trigger an LDAP sync in APS:

      1. Modify the full or differential sync cron trigger to a time in the near future.
      2. Restart APS.
      3. Wait for the sync to be triggered by the new cron schedule.
      4. Modify the full or differential sync back to the original value.
      5. Restart APS again.

      This need of a second restart is the reason for the request of the ability to trigger an LDAP sync on demand in APS like you currently can do in ACS.

      Business Reason

      If a customer were to make a change to their LDAP search base or queries in APS and wanted to confirm the changes are correct by triggering a sync, the customer would also have to modify the sync cron triggers to trigger a sync. The current method will shut down application causing down time to the end users. The current method does not allow immediate action for deactivating users that have been removed from access.

      ACS (unlike APS) provides this feature in the Alfresco admin and jmx console via exposed JMX operation that will trigger an LDAP sync.

        Attachments

          Activity

            People

            • Assignee:
              djohnson Doug Johnson
              Reporter:
              ccollins Cody Collins
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: