How to monitor success of LDAP synch

[Seamus Shortall]

We need to be get an automated notification from Confkuence (SErver) whe the LDAP synchronisation fails.

We recently had login  issses caused by errors in our Active Directory. The resolution was to fix the data in AD. 

We pursued various avenues of investigation, including cookie-handling and browser settings. But, it was not until we inspected the directory configuration pages in Confluence  that we saw a message indicating the the synchronisation had failed. Inspecting the server log led us to identify the corrupt AD entry that caused the failure.

Resolution would have been quicker if we had known earlier that the synch had failed.

Is there a way to have Conflunce send us an e-mail when this happsns, or is their a reliable log in Confluence where we can detect the failure (e.g. using Nagios?

[Daniel Ebers]

Hi Seamus,

I understood you want to know when a LDAP sync fails before the first users are calling in.
As far as I know there is no monitoring that would provide that but I think your approach is pretty good.
You said you spotted the problem through logs - I'd recommend to note the exact error message and establish some sort of monitoring (and be it log file parsing) on this error.
Surely, there could be plenty of several error messages - which you do not capture by monitoring for the single one you saw lately but it should be a good start.

I am not aware of many users that monitor for a failed LDAP sync but from my opinion it is advisable to spend time into a monitoring - should keep users happy ;)

Cheers,
Daniel