Hi,
We are seeing some issues with the our Broadcast Domain controllers, and noticed a higher volume of connections from DataMiner on the hour (from the various VIP addresses of our on-prem cluster to the different DCs). We don’t think it’s necessarily a DM problem, but we wanted to know how often DataMiner is set up to communicate with the domain controllers, and whether this happens per-server, or across the whole cluster? We have a lot of users on the system, but I don’t think that would be causing more load, unless I misunderstand how the AD authentication is working…
Thanks,
Thomas
Hi Thomas,
There is a Windows scheduled task named "Skyline DataMiner LDAP Resync" that runs on the hour. This will trigger synchronization of users and groups in DataMiner, on each agent in the cluster, so it is expected to see a burst of ActiveDirectory LDAP queries at that time. If needed, you can modify the schedule of this task e.g. to run every 2 hours instead, or only during business hours when changes to users and their group memberships are expected.
Yes, that should be fine.
Thanks Bert. Is there any documentation on how to do this?
Also, if we were to disable this task, would existing users still be able to log in? It would be helpful to do this and see if the issue is still present on the DC after an hour
Thanks
There is no documentation on this, it is a standard Windows scheduled task that you can modify as you wish. If you were to delete it, it would get recreated on the next DataMiner restart.
Ok, thank you!
Ahh thanks Bert, that’s exactly the context we were after.
Is it possible to adjust the task to run at an offset from the hour? I think the DCs are experiencing a big spike (from multiple systems, not just DM), and if we could space our clusters out a bit that might help