By Default LDAP groups / users are synchronized (flattened) on a daily basis. However this can be modified within the Yellowfin DB.
Important!
Making changes to the Yellowfin DB can cause undesired effects, so it'a always recommended making a backup before making such changes.
Within the TaskSchedule table you should see records 'Group Flatten Task' & 'LDAPUpdateTask'.
Group Flatten Task flattens all LDAP groups and rebuilds them so if new users have been added, or existing users have been removed this will make sure the LDAP group in Yellowfin also matches the server.
Alternatively you can also run the attached 'FlattenGroups.jsp'. Simply copy this to your Yellowfin ROOT folder and access it via URL \\<Yellowfin Server\FlattenGroups.jsp
LDAPUpdateTask will flag YF users as deleted once this user has been removed from the LDAP server. When a user is deleted from the LDAP server they can no longer be authenticated when logging into Yellowfin. This task simply flags the user as deleted. Here is an example of the standard records:
IpOrgScheduleSubjectCodeScheduleUnitCodeScheduleUnitIdScheduleIsOnLocalTimezoneCodeFrequencyTypeCodeFrequencyCodeFrequencyUnitLastRunGMTDateTimeLastRunDateLastRunTimeLastRunStatusLastRunErrorDescScheduledLocalRunTimePriorityCodePrioritySetByCode
1SYSTEMTASKGroupFlattenTask00AUSTRALIA/SYDNEYDAILYNULL02.01E+1300:00.082800SUCCESSNULL0NULLNULL
1SYSTEMTASKLDAPUpdateTask00AUSTRALIA/SYDNEYDAILYNULL02.01E+1300:00.082800SUCCESSNULL0NULLNULL
You can change the above to FrequencyTypeCode = HOURS, FrequencyUnit = 5 (so this will run every 5 hours).
Example after making changes:
IpOrgScheduleSubjectCodeScheduleUnitCodeScheduleUnitIdScheduleIsOnLocalTimezoneCodeFrequencyTypeCodeFrequencyCodeFrequencyUnitLastRunGMTDateTimeLastRunDateLastRunTimeLastRunStatusLastRunErrorDescScheduledLocalRunTimePriorityCodePrioritySetByCode
1SYSTEMTASKGroupFlattenTask00AUSTRALIA/SYDNEYHOURSNULL52.01E+1300:00.082800SUCCESSNULL0NULLNULL
1SYSTEMTASKLDAPUpdateTask00AUSTRALIA/SYDNEYDAILYNULL02.01E+1300:00.082800SUCCESSNULL0NULLNULL
Note:
You will need to restart the YF service after making changes to the Yellowfin DB.
Related Posts:
LDAP authentication Guide
Creating LDAP Users
Creating LDAP Groups
Defining the Default Role
LDAP connection settings & provisions
If you are receiving errors, or having issues setting this up, please post a comment and one of our team will help.