EFT lost its user/group associations when AD server is unavailable

EFT lost its user/group associations when AD server is unavailable


EFT lost its user/group associations when AD server is unavailable




GlobalSCAPE 5

EFT Express (SMB) & Enterprise

THE INFORMATION IN THIS ARTICLE APPLIES TO:

  • EFT, all versions

DISCUSSION

When EFT connects to an authentication server (LDAP/AD), the server usually replies with its list of users. Just like any other server, EFT will lose its group associations if it connects to the AD server and those users aren’t returned or AD server is unavailable. If the server returns a list with 0 users, EFT will to lose all of its user/group associations that you have configured in EFT.

The registry settings below cause EFT to ignore that list of 0 users and keep the user/group associations that you have configured. 

To activate this feature, create both of the DWORD keys below:

On 32-bit systems:

[HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE Inc.\EFT Server 4.0]

On 64-bit systems:

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\GlobalSCAPE Inc.\EFT Server 4.0]

"UserDatabaseSynchronizationMode"=dword:00000002

0 = normal

1 = log auth provider synchronization to event log, but otherwise normal

2 = log auth provider synchronization and do not delete users; if this "Do Not Delete" mode (2) is chosen, users will not be deleted from EFT during synchronization or after a TE Service restart.

"IgnoreZeroUsersResult"=dword:00000001

0 = normal

1 = If zero users received, abort and do not honor sync attempt. Event is logged to the Windows Application log.