Search the Community

We have started to see GCDS failing as it's trying to remove OUs from the G Suite domain. For example, if the AD OU is removed, the G Suite OU would normally have been removed automatically in the past, but we are getting this error in the logs: [2020-09-03 14:49:16,792+0100] [swingWorker-pool-2-thread-6] [ERROR] [plugin.google.ApiaryRetryPolicy] Retry attempts exhausted for Deleting orgunit uk/sch/herts/xxxxx/School/Users/TEST, with attempt # 0 [2020-09-03 14:49:16,792+0100] [swingWorker-pool-2-thread-6] [ERROR] [plugin.google.ApiaryRetryPolicy] Last encountered exception: com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request { "code" : 400, "errors" : [ { "domain" : "global", "message" : "Invalid Customer Id", "reason" : "invalid" } ], "message" : "Invalid Customer Id" } In this case, it's a test OU created in AD, which GCDS is happy to create in G Suite domain. Remove it in AD and GCDS can't sync that change. Has anyone else noticed this behaviour? It seem to be affecting multiple sites and is a recent development. Any ideas?

Hi We're currently using GSuite and all staff/studetns have account. I'd like to automate the creation of new accounts and the updating of in-use account using GCDS, therefore I need to link the AD accounts to GSuite or assing them a a GCDS key whihc they normally get at creation. Is this possible? Thanks

Hello I have GCDS running, all working amazing, but when our school AD accounts are disabled e.g. Student or Staff has left, this change does not go up to Google so their account is still enabled. Google support can't understand what I am trying to do! These are the settings below: Thanks Billy

Hi folks, Currently we're a Google Workspace school and provision our accounts from a local AD using GCDS and Password sync. Previously we were a Microsoft school and in the background we're still syncing groups and users up to Microsoft with Azure AD Connect, although our tenancy has been left to ruin. I'm looking at changing how users are provisioned and authenticate, so it's all done through Azure AD. This is to get SSO more centralised for our systems, and well as have access to MS's superior conditional access policies. So, my question is: does anyone have any experience swapping this all around? Are there any tips you can offer, or know of any pitfalls to avoid? The last thing I want is for all of our docs to vanish into the ether trying to swap it all around

Hi Any experts with GCDS ? I'm getting Salamander to sync Google Classroom this year, and one of the requirements is using GCDS to sync accounts between AD to Google Suite. It's very buggy at the moment .. for a start I can't even save or open Config files properly: this was ran on Server 2022, Windows 10 and Linux machine as a test. I'm running the latest version of GCDS. Version 4.7.14 Any ideas would be appreciated. Also is it best practice to use LDAP on my internal server (389) or use LDAP SSL (seems more involved) Whats the best way to filter out legacy stuff on Google Gsuite if previous users/groups were created manually or through Wonde? Cheers Wil