8-14
UserGuide for Cisco Digital Media Manager5.4.x
OL-15762-05
Chapter8 Authentication and Federated Identity
Concepts

Guidelines for Synchronization

Note MicrosoftActive Di rectory is the only LDAP implementation that we support in this release.
We recommend that you synchronize your LDAP bookmarks periodically. Synchronization ensures that
user and group membership associations are current and correc t.
Related Topics
•
Manage LDAP (ActiveDire ctory) Attributes, page 8-29
LDAP Concepts
•
Understand LDAP Attributes, page 8-15
•
Guidelines for LDAP Filters, page8-15
Sync
Type Best Practices
Initial
The Initial option is CPU-intensive for your DMM appliance and might lower performance
temporarily. We recommend that you use it during off-peak hours only.
Update
We recommend that you use the Update option whenever:
•
A new user account in ActiveDirectory should have login access to DMM.
•
User attributes
1
change in Active Directory for a user account in DMM.
•
A user account is disabled in Active Directory and should be deleted from DMM.
Overwrite Note The Overwrite option is CPU-intensive for your DMM appliance and might lower its
performancetempor arily. We recommend that you use this option during off-peak hours only.
•
After a user account is deleted from ActiveDirectory, this option deletes the
corresponding user account from DMM.
•
After a user account is associated to a new first name, last name, or username, this
option overwrites the outdated user account attributes.
Delete
Caution The Delete option is destructive by design. We advise that you use it sparingly and with
greatcaution.
Note Typically, the deletion process takes about 1mi nute to finish. However, when there are more than
50,000 users in the ActiveDirectory database, this process might run in the background and take about
30minutes to finish. In this case, the user interface in DMS-Admin can show that a bookmark was deleted
even though the actual process has not finished. If you observe this behavior, simply allow 30minutes for
the operation to finish.
1. Attributes that you entered on the Manage Attributes property sheet in DMS-Admin.