Auth source sync with about 200K users

I have an authentication source that needs to synchronize about 200K users. This process is taking a REALLY long time. It looks like I have to execute a full synchronization every time because our groups and users can always change. Is there a way that I can synchronize our user base but only update the users that have changed? If I don't synchronize the entire user base at the same time it looks like most of the user would end up being disabled.
Is there a best practice approach to synchronizing this many users? Is there a way to breakup the user base so that I can synchronize chunks of users in parallel? Is there a way to synchronize only a subset of the users without causing the rest of the users to be disabled?
I looks like the creation of the users in the portal (possibly the inserts into the DB) is taking all the time, the auth source returns the 200K users from our user DB in under 2 minutes.
An suggestions would be appreciated.
- Justin

We have about 2k users and it takes about 1 minutes. I'm guessing your 200k is going between 1-3 hours?
That said, you can create multiple AW/PW Sources and a few jobs to run them staggered and at off hours.
You could then even attempt to do the "parallel" jobs although I can't say if it would work or they would be just trigger 1 after the other.
Just break your sources apart based on groups.

Similar Messages

  • HT1386 synced with a another user account

    When I tried to re-sync my iPhone 4S in iTunes and I click the boxes to sync contacts and calendar I get a message saying that this is synced with a another user account.  I only know about one account I have which I used to sync this up before any help please

    This issue has been around for literally years and apple unfortunately seems to be doing nothing about it. The only way to solve it is literally to back up all of the information on your iphone. Wipe it and start again. If anyone at apple would like to give us a better way to do it please do!

  • User home folder on ML and sync with Server - Disable User

    Hi all, I've got a problem about user authentication and home directory sync since I've updated my clients to Mountain Lion...
    (excuse me for my bad english)
    I've got some macs, many with 10.8 (updated with archive and install, not directly updated from old version), that are binded to a Mac Mini Server with 10.8 Server (in the first days I've on it 10.6.8 server, after this problem I tried the server update but with no good news); users authenticates on server, and syncs their home directories with it at login, logout and every 15 minutes...
    Now the problem: every morning, when users came back to work, they can't login because their accounts are disabled in Open Directory (only every account that has logged the day before): I resolve this manually enabling all accounts in workgroup manager (the checkbox "user can access account" is unchecked).
    I have no idea about the reason...
    I've got this ONLY with 10.8 clients, if users work only on 10.6 or 10.7 clients, accounts are always enabled!

    Many of your questions will be answered in the 'File Services Manual':
    http://images.apple.com/server/macosx/docs/FileServices_Adminv10.5.pdf
    and the correct use of permissions and ACLs.

  • Very slow calendar sync with Outlook 2010 users.

    Hi guys.
    My company is running Office 365 with hosted Exchange. Most clients are using Outlook 2010 and are reporting that when trying to access shared calendars, all operations are incredibly slow and can take up to a few minutes to show any calendar items. I'm one
    of the only users on Outlook 2013 and the Outlook 2013 users don't seem to experience as much of an issue, but it is still there. Is there a way I can look into this to fix it?
    Having the calendar shared all over again doesn't seem to fix. It's been suggested that I should run the O365 setup from OWA again - is there any ground to this?
    Thanks for your help.

    Hi,
    Please follow the troubleshooting steps below on this issue:
    1. Disable the firewall and anti-virus program to test again.
    2. We may suspect there’s a 3rd-party add-ins that may be the possible reason, let's run Outlook in Safe Mode, to determine if it is 3rd-party add-ins related.
    Press Win + R and type “outlook.exe /safe” in the blank box, then press Enter.
    If there’s no problem in Safe Mode, disable the suspicious add-ins to verify which add-ins caused this issue.
    3. Go to File tab -> Account Settings ->
    Account Settings -> Double clicking on the account name ->
    More Settings -> Advanced tab ->
    Download shared folders, tick or untick the checkbox to check the result.
    4. If the steps above don't help, simply create a new profile to setup the account:
    http://support.microsoft.com/kb/829918/en-us
    Regards,
    Melon Chen
    TechNet Community Support

  • Address book Sync with Lion Server

    Hello,
    I have set up a Mac Mini with Lion Server and have OD users (no local user on the server). When I login "locally" (using the OD user account), I have my full environment, everything seems to work ok. Also the sync from my iPhone seems to work (only some calendar errors, sync doesn't come up with address book errors). But, as I now have noted, there is not really a sync of the address book. I have an old version of my address book on the server.
    How do I properly set up that:
    - my iPhone syncs with my OD user's address book only
    whereas
    -  central address book is kept on the OD server as well (without any sync)?
    Or did I get something wrong regarding the concept of running an address book on the Lion server ... maybe it's not possible to sync the iPhone to an OD user's address book?
    Best regards,
    Olaf.

    Have you tried rebuilding the accounts in SystemPrefs>Mail, Contacts and Calendars?
    Are the machines bound to the directory?
    Try setting it up in a fresh account on the broken Mac.
    Try setting it up on a different Mac.
    Hope this helps,
    Brian

  • HT1206 Lots of info about one user using multiple computers. What about multiple users with separate Apple IDs using same computer? Having problems getting my wifes new iPhone talking to her apple account on the computer we share (2 users)

    Lots of info about one user using multiple computers. What about multiple users with separate Apple IDs using same computer? Having problems getting my wifes new iPhone talking to her apple account on the computer we share (2 users)

    You need to create a user account for your wife (or yourself depending on who has the current user account). When syncing, each of you should sign in as a separate user, login to iTunes and then sync. I had this problem when my sister got an iPhone. When we did her initial sync, everything on my iPhone showed up on hers. Apple gave me this solution.

  • Migrating EPMA Planning application: Failed to sync with user provisioning

    Hi All,
    We are migrating applications from Production to Dev. We have one EPMA Planning and one Essbase application in both environments.
    We have migrated artifacts into File system in PROD(Shared services, EPMA, Planning, Essbase and Reporting). We have copied and pasted in import_export folder in DEV.
    Then we are trying to migrate artifacts into applications from File system in DEV. First we did EPMA artifacts successfully in migration status report then we have deployed application into planning without any errors.(msg showing as in sync deployment). After that we did shared services, it is failed
    migration status report error msg:
    +28:6571:Application <xxxxx> does not exist in target. 28:6571:Application <xxxx> does not exist in target. 28:6571:Application <xxxx> does not exist in target. 28:6571:Application <xxxxx> does not exist in target. 28:6571:Application <xxxx> does not exist in target. ...+
    When i am trying to open the planning application, i am getting error: Failed to sync with user provisioning, check planning log for details
    HyS9planningsyserr.log details:
    [INFO] RegistryLogger - REGISTRY LOG INITIALIZED
    [INFO] RegistryLogger - REGISTRY LOG INITIALIZED
    Creating rebind thread to RMI
    com.hyperion.planning.DuplicateUserException: Another user with the name hypadmin already exists.
    com.hyperion.planning.DuplicateUserException: Another user with the name hypadmin already exists.
    com.hyperion.planning.HspRuntimeException: Failed to sync with user provisioning. Check Planning log for details
         at com.hyperion.planning.HspJSImpl.synchronizeUserWithProvisioning(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
         at HspLogOn.Handle(Unknown Source)
         at HspLogOn.doGet(Unknown Source)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
         at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
         at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:283)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
         at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3241)
         at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
         at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
         at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2010)
         at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:1916)
         at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1366)
         at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
         at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
    java.lang.RuntimeException: Errors occured during syncrhonization: [com.hyperion.planning.DuplicateUserException: Another user with the name hypadmin already exists.]
         at com.hyperion.planning.HspJSImpl.synchronizeUserWithProvisioning(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
         at HspLogOn.Handle(Unknown Source)
         at HspLogOn.doGet(Unknown Source)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
         at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
         at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:283)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
         at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3241)
         at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
         at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
         at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2010)
         at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:1916)
         at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1366)
         at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
         at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
    java.lang.RuntimeException: Errors occured during syncrhonization: [com.hyperion.planning.DuplicateUserException: Another user with the name hypadmin already exists.]
         at com.hyperion.planning.HspJSImpl.synchronizeUserWithProvisioning(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
         at HspLogOn.Handle(Unknown Source)
         at HspLogOn.doGet(Unknown Source)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
         at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
         at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:283)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
         at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3241)
         at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
         at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
         at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2010)
         at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:1916)
         at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1366)
         at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
         at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
    com.hyperion.planning.DuplicateUserException: Another user with the name hypadmin already exists.
    com.hyperion.planning.HspRuntimeException: Failed to sync with user provisioning. Check Planning log for details
         at com.hyperion.planning.HspJSImpl.synchronizeUserWithProvisioning(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HspJSImpl.login(Unknown Source)
         at com.hyperion.planning.HyperionPlanningBean.Login(Unknown Source)
         at HspLogOn.Handle(Unknown Source)
         at HspLogOn.doGet(Unknown Source)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
         at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
         at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:283)
         at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
         at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3241)
         at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
         at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
         at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2010)
         at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:1916)
         at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1366)
         at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
         at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
    java.lang.RuntimeException: Errors occured during syncrhonization: [com.hyperion.planning.DuplicateUserException: Another user with the name hypadmin already exists.]
    Thanks,
    mady

    Hi,
    I got solution for this issue through Oracle Support.
    I have restored database and migrated artifacts using LCM. any one method is enough to do Planning application migration (from Oracle Support)
    Thanks,
    mady

  • Error trying to import users from NT Domain Auth source

    Hi all,We cannot login to the portal using Auth source after NT administrator changed administrative password.We are trying to run NT Domain auth source in 5.0.3. Getting following error. It was working before. Any clue?? Thanks for any help.
    5/10/05 12:06:30- Starting to run operations (1 total) for job 'NT User Import Job - Run Once (2)'. Will stop on errors. (PID=3596) 5/10/05 12:06:48- *** Job Operation #1 of 1: Authentication source (for synching users and groups) 'BWSC' [Run as owner 'Administrator'] 5/10/05 12:06:48- Creating the Everyone In Auth Source group (if one doesn't already exist). 5/10/05 12:06:48- Need to create an Everyone Group for this auth source. 5/10/05 12:06:48- Error IDispatch error #16132 (0x80044104): SQL Execute Error (0x80004005): DELETE FROM PTOBJECTSECURITY WHERE OBJECTID=? AND CLASSID=?
    ADO Error: count = 1, return code = 0x80004005
    Unspecified error (SQL State (null)) 5/10/05 12:06:48- *** Job Operation #1 failed: Error IDispatch error #16132 (0x80044104): SQL Execute Error (0x80004005): DELETE FROM PTOBJECTSECURITY WHERE OBJECTID=? AND CLASSID=?
    ADO Error: count = 1, return code = 0x80004005
    Unspecified error (SQL State (null)) (0x4) 5/10/05 12:06:48- Done with job operations. 5/10/05 12:06:48- Error IDispatch error #16132 (0x80044104): SQL Execute Error (0x80004005): DELETE FROM PTOBJECTSECURITY WHERE OBJECTID=? AND CLASSID=?
    ADO Error: count = 1, return code = 0x80004005
    Unspecified error (SQL State (null))

    Yes. Other instrinsic jobs are failed too. Does this related to Job Dispatcher service? Thank you for your help.

  • Sync with second user outlook contact lists?

    I have an enterprise user that would like to sync his iPhone with his administrative assistant's Outlook contact lists. Is there a way to accomplish this?

    The iPhone 4 will allow sync with multiple Exchange accounts.  It would  be interesting to try this, at least on a test basis. I'd worry though about duplication or overlap of contact lists.  I haven't tried this myself but it would be interesting to see what happens. 

  • 2-way syncing of calendars with iCal/Outlook users

    Has anyone found an inexpensive hosted calendar solution that allows iCal and Outlook users to share calendars? more specifically a solution where the shared calendar can be edited by either party?

    Success! I think I have gotten to the bottom of this now. With the latest version of Jeffrey Friedl's Flickr plugin you can indeed populate both the sets and groups.
    The link provided by Victoria to Jeffrey's blog allows you only to populate the "photostream" collection in the publish services of Lightroom.
    However further down in the settings of the jf Flickr plugin there is a part entitled:
    "Sync set/group membership for photos already part of this publish service".
    It gives a warning about this being beta and undocumented, so to backup catalog before trying.
    I did this and synced nearly 7000 photos in Flickr in a lot of sets that it automatically added and located the vast majority of them in my Lightroom library, which contains about 45,000 images. It all took maybe half an hour to run, so it was slow (even with a fast internet connection) but worked! I am a happy camper!
    A bonus that I was not looking for but discovered is that this plugin will also sync with Flickr groups.
    The version I used is http://regex.info/LightroomPlugins2/releases/flickr-20130324.298.zip
    Thanks Victoria and Paige for all of your help
    Marcel.

  • I have songs in my iTunes library that I burned from CD's. They play in iTunes and will sync with my iPad. They play fine on the iPad.  However, the songs will not sync to my iPhone 4S.  There are now exclamation points next to songs (can't find source).

    I burned cd's in iTunes. The songs were able to sync and play on my iPad. After this, exclamation points appeared in iTunes on my laptop (unable to find source).  They still play in iTunes but will not sync with my iPhone 4S.  Do some cd's have a limit on the number of times you can copy them or is this an iTunes problem.

    KiwiLouisa - I had the same problem.  I was eventually able to distribute my content that was "Not eligible for iCloud" to my iPhone by switching off ITunes Match in both the ITunes app/machine that hosts my library (my Macbook Pro, in this case) as well as on the device to which I wished to distribute my content (my iPhone 6+).  This opened up the option for my device iTunes Music settings for selecting "Entire Music Library".
    After I successfully transferred *ALL* my music and music videos via iTunes sync, I then again switched on ITunes Match in iTunes on my Macbook and on my iPhone.
    This does not change the iCloud status, but at least I have the content on my iPhone.

  • I want to sync my I phone user name (my current e-mail address) with my iPad, PC user name (old e-mail address.) If I delete that current address in the iPhone, won't I also be deleting it in my other devices? They are synced. I don't want to lose it

    I want to sync my I phone user name (my current e-mail address) with my iPad, PC user name (old e-mail address.) If I delete that current address in the iPhone, won't I also be deleting it in my other devices? They are synced. I don't want to lose it. I just want to get it out of the way on my iphone so it doesn't confuse the transfer of ID names and then I want it back again..      I tried deleting the cloud account, being told the current e-mails would be spared. But all it did was pop up a prompt asking me for the password to my still current email ID. So I assume now that I have to go to mail and get rid of the e-mail account. But I'm scared I'll lose everything in my other devices too.

    You can change the email address you use as your apple ID. this doesn't mean you have to delete the old email address as email.
    When you delete an email from your device, it is only removed from the device, it does not delete your emails or the email account.

  • How to sync 2 different Mac users using the same Apple ID and with out mixing each other info?

    How to sync 2 different Mac users using the same Apple ID and with out mixing each other info?
    We are two people using three difrent Macs, 1 Iphone and 1 Ipad with separate USERS  on each Mac but sharing the same Apple ID: xxxxxx
    I set up the first user to iCloud and it was OK but when I set up the second user to use iCoud the first users's info gets mixed with the second user's info?
    Do we have to set up a diffrent Apple ID for each other?
    Sometime ago I added my friends E mail (yyyyy) to the main Apple ID (xxxx) as for using his E mail account (to separate our e mail accounts, and it's working ok) but now when I try to create a new apple ID whith the same friend's e mail (yyyyyy)  it says that his mail (yyyyy) is already an apple ID when the Apple ID is really my E mail (xxxxx)... any clue?
    Thanks

    I believe because you migrated from a Nokia to an iPhone you need to register the Bn phone number with your Apple ID so it can be used for iMessage. The Pn number seems to be the only one registered
    Go here > https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/
    Manage your Apple ID and see if that does the trick
    Hope that helps

  • Have used 1 computer to sync my iphone 5 but today I get message about itunes erasing everything because I am synced with other library. what's up with that?

    My Toshiba Satellite is all I have ever used to sync my iPhone 5. I don't know what is going on today but iTunes seems to think I am "synced" with another computer. I have a couple of hours of voice memos that I would hate to lose but iTunes asks if I want to "erase and sync with this Itunes library". If it weren't for the voice memos I'd do it since all the other data is stored in itunes. What can I do? I've restarted both devices thinking it might help with no luck. Is there a way to remove the memos without itunes. The smallest memo is about 45 min long on up  to 2 hrs +.

    I'm guessing this is a problem unique to me as there have been no replies at all...  Thanks a bunch folks

  • I have about 1000 contacts on my iPhone 4 after syncing with iCloud there are only about 120 contacts on iCloud How can I have the same info on both the iCloud and my iPhone

    Hi
    I have about 1000 contacts on my iPhone 4 after syncing with iCloud there are only about 120 contacts on iCloud How can I have the same info on both the iCloud and my iPhone

    On the iPhone tap Settings > iCloud
    Switch Contacts off then back on then reset the device.
    Hold the On/Off Sleep/Wake button and the Home button down at the same time for at least ten seconds, until the Apple logo appears.

Maybe you are looking for

  • Error creating view with CASE -- WHEN statement in SQL*Plus

    I am using Oracle 8i 8.1.7 I have an Oracle view which uses CASE...WHEN statements. The view compiles fine in DBA studio. Using TOAD I saved the view as an *.sql file. However, when I try to create the view in SQL*Plus I get the following error: SP2-

  • L215p - better than T410s screen? Good enough for photo editing work?

    I never had set up an external monitor with a laptop, so just have 3 questions regarding the L215p monitor. 1) The T410s outputs screen resolution with an aspect of 16:10.  A monitor like the L215p (most new wide monitors for that matter) display an

  • DC20 setting

    Hi Gurus, Questoion. Is the path  in DC20 --> Define data carier  server, front end applicable to all users? Can it be changed to user specific? example: USER1 path is c:\temp\ User2 path is d:\temp\can this be done? Thank you

  • Can the Mac record digital cable TV?

    My digital cable box (Scientific Atlanta - Explorer 3250HD) has two Firewire ports on the back. When I connect it to my Mac mini with a Firewire cable, the cable box shows up in the System Profiler. Is it possible to use the Mac mini to record TV sho

  • Can anybody give me in logical standby

    give me the link and obe of logical standby which book is refer to me for dataguard.