cancel
Showing results for 
Search instead for 
Did you mean: 

Profile Synchronization only syncs few users and groups in CA 10.0

Harsha_Rachapal
Level 2

Active Directory Profile Synchronization is set to Automatically synchronize users and groups.

  • All groups get synced, LAst synchronized date: Shows latest date (Search whole tree is checked)
  • However only few users ~700 gets synced (Sync Date: show today's date and time).
  • Total number of users is 10,000.
  • Not a big volume and the interval between each sync is 8 hours.
  • There are no event errors.
  • No errors in DTrace.
  • Seems the last time users were synced was Sync Date: 1/17/2014. 
  • Checked all Firewall rules and AD ports. Looks good and available on CA server.

Any help is greatly appreciated.

1 ACCEPTED SOLUTION

Accepted Solutions

Harsha_Rachapal
Level 2

So we had to engage Veritas and increase the chunk-size to 50,000. Usually the system will only allow you to increase the size to 10,000. However Veritas allowed us to update the configuration limit through the database which allowed the size to be increased to 50,000. Once this was done, the synchorization was able to sync all profiles. It seems there is an issue with 10.0.4 that it will only synchronize the max-chunk-size in one iteration. If the profiles are more than the chunk-size, the ADSynchronizer will not perform a second iteration to sync the remaining profiles.

View solution in original post

5 REPLIES 5

AndrewB
Moderator
Moderator
Partner    VIP    Accredited

can you start a dtrace, manually run a sync, and post the dtrace logs? make sure to run the dtrace on the CA server.

Kenneth_Adams
Level 6
Employee Accredited Certified

Hello, Harsha Rachapalli;

The latest version of CA 10 (10.0.4 base through CHF3) only synchronize Monitored Employees if there has been a change to their properties since the last time they were synchronized. As such, you can have a Monitored Employee who has not synchronized in 2 years if nothing in their Active Directory account has changed in 2 years.

Now, if you know for a fact that you have Monitored Employees who DO have changes that have not synchronized, we would need a dtrace of the ADSynchroniser process on the CA server while the Enterprise Vault Accelerator Manager Service (EVAMS) is starting so that we can see what is happening during the synchronization.

There are a few configuration settings that we may need to adjust, such as the number of custodians to synchronize per pass (this is a hidden setting with a default of 1000) and / or the number of synchronization threads to use (visable setting with a default of 5).

Please take a look at some of the Monitored Employees who have not synchronized for some time and see if they have any Active Directory chagnes since they were synchronized.  If no changes, don't be concerned about them not synchronizing as that is expected behavior.  If you do find any that have had changes in AD, then get the dtrace log and let us have a look at it, please.

JimmyNeutron
Level 6
Partner Accredited

Hi Harsha,

Depending on how many users you have in your environment, you can change the number of users to sync per pass

 

In the CA client, go to Configuration tab>Settings

Hold Control+Shift on your keyboard and click the "Configutations Settings" bar on the top left (this will enable hidden settings in CA)

Scroll down to Profile Synchronization

Change the Chunk Size for ADSynchronizer to the max 10,000 then click Save on the lower right of the client.

Restart EV aAccelerator Manager service for the change to take effect.

 

 

 

JimmyNeutron
Level 6
Partner Accredited

Hi Harsha, did you ever resolve this issue?

Harsha_Rachapal
Level 2

So we had to engage Veritas and increase the chunk-size to 50,000. Usually the system will only allow you to increase the size to 10,000. However Veritas allowed us to update the configuration limit through the database which allowed the size to be increased to 50,000. Once this was done, the synchorization was able to sync all profiles. It seems there is an issue with 10.0.4 that it will only synchronize the max-chunk-size in one iteration. If the profiles are more than the chunk-size, the ADSynchronizer will not perform a second iteration to sync the remaining profiles.