LDAP query every 5 to 10 minutes

[Alex Macdonel]

Is there a way to configure an LDAP pull that will bring in only new user records for the last few hours or day?

It appears that the Listener process doesn't create new user records but, to create an account, I need to do a full LDAP sync that, if I run every 5 minutes, would swamp my connection.

Is there a way to create an LDAP OU definition with a filter for uSNChanged in the last few hours?


Thanks,

[prdelong]

You can create a new OU definition with a filter to grab those like you mentioned. However I am not quite sure if there is a way to dynamically use dates in the filter. I've only ever used a static date. However you could probably create a scheduled job to run once a day or a few times a day, dynamically grab the GlideDate, convert it to the MS filter format, and then append it onto the filter of the Custom OU you created.

http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx#External_Links

[Alex Macdonel]

Yeah, I was wondering if there's a way to dynamically set the date.

How would you do what you suggest: converting the date to a MS filter and then appending it? My SN skills are not that advanced.


Thanks,

[prdelong · Accepted solution]

Create a new LDAP OU and Data Source if you haven't already. Make sure the settings are the same as your normal ones, including the target table. This allows you to leverage existing LDAP transform maps.

1) Create new Scheduled Job -- > Automatically run a script of your choosing.
2) Give it a name and set it to run daily at midnight (or whatever time you want).
3) Paste the attached script into the "run this script" field
4) Update the sys_id values in the script for you new LDAP OU and Data source
5) Save record and test

I successfully tested the dynamic filter and OU filter updater in a demo instace. However I was not able to verify the trigger execution as I could not run this against our LDAP server.

[Alex Macdonel]

This script hit the spot, had to tweak it a bit but it does everything I was looking for.

Thanks.