Synchronizing Users with LDAP
Enabling the Synchronize Name with LDAP option for a user allows the full name, last name, or email address of the user to be automatically synchronized between LDAP and the database. This prevents problems that can occur when user attributes are changed in LDAP.
Updates to user data are made on a periodic basis rather than as soon as the update in LDAP occurs. By default, user data is updated weekly. The interval between synchronization is determined by the wt.org.userSyncTime property. Synchronization is checked when a user logs on to Windchill if the time specified in the property has been exceeded since the last update.
User data synchronization can be done by an administrator using the following process:
1. Update the necessary attributes in the LDAP entry for the user.
2. Ensure that the user is not logged on to Windchill and that all browser sessions have been closed.
3. Run the following SQL command from the database command prompt: Select lastSyncTime from WTUser where name='<userid>';
4. Confirm that the value displayed is larger than the value of the wt.org.userSyncTime property.
5. In Windchill, navigate to the Participant Administration utility.
6. Add the user to the Participant Administration table.
7. Right-click the user in the table and select the Remove from Cache action.
The user data should be updated the next time the user logs on to Windchill.
 |
Depending on your settings for the wt.session.sessionUsers.timeout property, a wait time of up to 30 minutes may be required to clear the active session of the user.
|