LDAP Sync Schedule

MattP

Hi, i cant find in the documentation how to set up an Automatic LDAP Sync Schedule. Currently when new Active Directory users are added, we must manually sync them via the Admin Web UI.
Can someone advise on how to set up a LDAP Sync schedule for example every 15 mins ?
thanks

crpb

You could add a systemd.service + timer like this.
https://github.com/crpb/grommunio/tree/main/enhancements/grommunio-ldap-sync

% systemd-analyze --iterations 10 calendar '*:0/15'
  Original form: *:0/15
Normalized form: *-*-* *:00/15:00
    Next elapse: Mon 2025-03-03 09:00:00 CET
       (in UTC): Mon 2025-03-03 08:00:00 UTC
       From now: 9min left
   Iteration #2: Mon 2025-03-03 09:15:00 CET
       (in UTC): Mon 2025-03-03 08:15:00 UTC
       From now: 24min left
   Iteration #3: Mon 2025-03-03 09:30:00 CET
       (in UTC): Mon 2025-03-03 08:30:00 UTC
       From now: 39min left
   Iteration #4: Mon 2025-03-03 09:45:00 CET
       (in UTC): Mon 2025-03-03 08:45:00 UTC
       From now: 54min left
   Iteration #5: Mon 2025-03-03 10:00:00 CET
       (in UTC): Mon 2025-03-03 09:00:00 UTC
       From now: 1h 9min left
   Iteration #6: Mon 2025-03-03 10:15:00 CET
       (in UTC): Mon 2025-03-03 09:15:00 UTC
       From now: 1h 24min left
   Iteration #7: Mon 2025-03-03 10:30:00 CET
       (in UTC): Mon 2025-03-03 09:30:00 UTC
       From now: 1h 39min left
   Iteration #8: Mon 2025-03-03 10:45:00 CET
       (in UTC): Mon 2025-03-03 09:45:00 UTC
       From now: 1h 54min left
   Iteration #9: Mon 2025-03-03 11:00:00 CET
       (in UTC): Mon 2025-03-03 10:00:00 UTC
       From now: 2h 9min left
  Iteration #10: Mon 2025-03-03 11:15:00 CET
       (in UTC): Mon 2025-03-03 10:15:00 UTC
       From now: 2h 24min left

MattP

Thanks for the info, but I'm not really sure how to implement this specifically for LDAP sync ...

crpb

MattP Thanks for the info, but I'm not really sure how to implement this specifically for LDAP sync ...

And where are you struggling? The link should list a couple of files which include a script grommunio-ldap-sync, a .service and .timer to integrate that as a systemd-service and the Makefile to un/install it.
On an grommunio-appliance that would require zypper in -y make git (as "make" isn't installed by default. Unsure right now about git so i added it aswell). Followed by something like TMPGIT=$(mktemp -d); git clone --depth 1 https://github.com/crpb/grommunio $TMPGIT; mkdir -p ~/src/; cp -Rv $TMPGIT/enhancements/grommunio-ldap-sync ~/src/; cd ~/src/grommunio-ldap-sync; echo "after inspecting the contents of $PWD you could run: make install"

The systemd-analyze .. was just for the .timer as you will need to change it for your 15-minute schedule.