Monitoring ID synchronization

Use the Query Vault (qvault) console command or the Domino Administrator to update Person documents with the last successful ID synchronization time. Also use qvault to archive user vault documents manually to restart ID synchronization and to manage archived user vault documents.

Procedure

From the ID vault administration server, use load qvault command with the following optional arguments. Without arguments, the command scans all ID vaults on the server and updates the Person documents of the users found with their ID vault name and the time the users' ID vault documents were last modified. (Last modification time indicates when an ID file last synchronized with the vault.)
Table 1. qvault command switches
Switch Description
-x <vaultname>

Scan all documents in specified ID vault and update directory Person documents with vault assignments and the time the users' ID vault documents were last modified.

You can also do this task from the Domino Administrator:
  1. Click Security > ID Vaults.
  2. Select the ID vault document.
  3. Click Tools > ID Vaults > Scan Vault.
-x <vaultname> -u <username> Scan specific user document in specific ID vault and update directory Person document with the user's vault assignment and the time the user's ID vault document was last modified.
You can also do this task from the Domino Administrator:
  1. Click People.
  2. Select the Person document.
  3. Click Tools > ID Vaults > Scan Vault.
-x <vaultname> -u <username> -a Archive a user's ID vault document by renaming it so that an ID can be uploaded again from the client to the vault. Used to resume client-to-vault ID synchronization that has stopped.
-x <vaultname> -u <username> -r Revert a user's archived ID vault document to its original name.
-x <vaultname> -u <username> -d Delete a user's archived ID vault document.
-x <vaultname> -u <username> -i Inactivate a user's ID vault document to prevent the user from authenticating. For example, if a user works seasonally, inactivate their ID vault document when they're not working.
-x <vaultname> -u <username> -v Reactivate a user's ID vault document that is inactive. For example, reactivate a seasonal worker's ID vault document when they return to work.
-x <vaultname> -d Delete all archived user ID vault documents in a specific ID vault.

Example

load qvault -x O=Renovations -u "CN=Samantha Daryn/O=Renovations"