You want to monitor the replication activity on the AD server using the AD_response probe.
Release : 20.4
This article is informational.
1) Create a write profile:
- The connection of the profile must be of type "LDAP" (Do not use Global Catalog for write profile as it is a read-only server).
- Configure the object and attribute which will be used in the write mode:
+ Make sure the "Write mode" option is checked
+ The attribute of the object must be a writable attribute of type Unicode String.
+ You may want to create a new attribute specifically for probe usage only as the probe will write a timestamp string to that attribute at each interval or pooling cycle.
+ Do not manually change the value of the attribute.
- Click Test Write, and make sure you get a successful message.
- Click Test Read, and make sure you get a successful message.
2) Create a read profile:
- The connection of the profile can be "LDAP" or "Global Catalog". (Make sure there are "Global Catalog" servers available when you try to use this connection type).
- Configure the object and attribute which will be used in the read mode:
+ The object and attribute must be the same as configured in the write profile.
+ Make sure the "Write mode" option is NOT checked.
- Click Test Read, make sure you get a successful message:
+ You may get a "value is not set" warning message, if the probe receives an empty value from the AD, there are 2 possible scenarios, the first scenario is that the value that was set by the write profile, has not got replicated to the server configured in the read profile, you may want to wait for replication to happen or check if there are replication issues in the domain,
the second scenario the user may not have sufficient permission to get the value.
- The replication age is calculated by subtracting the current timestamp from the timestamp value which is written in the attribute of the object.
Make sure to familiarize yourself with all prerequisites and requirements: