cancel
Showing results for 
Search instead for 
Did you mean: 

ADScanJob issue since upgrading to 4.5

Bitter_Steve
Not applicable

We upgraded Data Insight to 4.5 and the time it takes the ADScanJob to run has increased from 2 hours to over 4 days. We are seeing this in lab environments as well as multiple production environments. I was told by Symantec engineering that it is fixed in 4.5.2 (although not mentioned in release notes) so I upgraded the lab and the issue persists. The issue has been ongoing for over 3 months. Has anyone else seen this issue and if so is there a fix?

1 ACCEPTED SOLUTION

Accepted Solutions

Rod_p1
Level 6
Employee Accredited Certified

Symantec has completed the QA testing for the patch mentioned above.

The patch is released and available on SORT at https://sort.symantec.com/patch/detail/10259

FYI
Rod

View solution in original post

2 REPLIES 2

Rod_p1
Level 6
Employee Accredited Certified

Hello Steve:

Changes that went into 4.5.2 sped up processing of cross-domain memberships. Current changes are specifically targeted at processing deleted users/groups faster.

You would see a log reference similar to:

INFO: V-378-1304-156: #{Transaction#} [wmain: 882] Detecting deleted users/groups for AD domains.

 

Symantec is working on a fix when there are large numbers of deleted users or groups in an Microsoft Activity Directory database. Typically support would request the users table database (C:\DataInsight\data\users\users.db.#) or at least a count of users and groups for scaling purposes similar to my example int he picture below:

query_0.jpg

Symantec has tested against ~14000 deleted users and ~8000 groups. The patch performs well even when we introduced network error for a large domain with ~700000 users. We currently have a Quality Assurance (QA) program putting it through our testing process.


Symantec engineering is patching the adcli binary additionally so that it 

  • processes deleted users/groups faster
  • in case of timeouts, it does not mark all unfetched users/groups from that domain as deleted

We will relay through the technical support channel the patch's availability as soon as feasible to assist you with this issue.

Others that may have experienced an issue fall into the category of network issues, firewall and inter-domain connectivity. These issues are also being considered in the testing underway for same patch.

For your information

Rod

 

Rod_p1
Level 6
Employee Accredited Certified

Symantec has completed the QA testing for the patch mentioned above.

The patch is released and available on SORT at https://sort.symantec.com/patch/detail/10259

FYI
Rod