Directory Sync Operational Flow

This software synchronizes users and groups with the IIJ ID Service via the following sequence.

  1. Directory Sync starts per the job scheduler of the operating system.
  2. OpenLDAP synchronization objects (the users and groups) are retrieved via the LDAP connection.
  3. Information on users and groups is retrieved from IIJ ID Service and then cache information is generated (when there is no cache).
  4. A request for the differential data based on the comparison between the retrieved OpenLDAP information and the cache information is generated.
  5. The differential data request is sent to the IIJ ID Service.
  6. Cache information is updated in accordance with the result of the differential data request.