Sun Java System Directory Server Enterprise Edition 6.0 Installation Guide

Deployment Example: A Two-Machine Configuration

This section describes a deployment scenario in which Identity Synchronization for Windows is used to synchronize user object creation and bidirectional password modification operations between Sun and Windows directories.

The deployment scenario consists of two systems:

Note –

Though NT is not used in this scenario, it is important to note that Identity Synchronization for Windows also supports synchronization with NT domains.

This example illustrates the synchronization requirements (node structures with associated attribute values) used for this deployment scenario.

Figure 3–9 Synchronization Requirements

Synchronization requirements showing node structures
and attribute values.

There are two goals for this scenario:

Note –

Identity Synchronization for Windows supports multiple synchronization sources of the same type (for example, you can have more than one Directory Server in a deployment or multiple Active Directory domains).

Creation, modification, and deletion synchronization settings are global for the entire set of directories, and cannot be specified for individual directory sources. If you synchronize user object creations from Directory Server to Windows directories, then user object creations will propagate from all Directory Servers to all Active Directory domains and Windows NT domains configured in the installation.

Physical Deployment

This section illustrates how all the product’s components are physically deployed on a single Solaris box, while the Active Directory domain resides in a separate Active Directory domain controller where no components have been installed.

Figure 3–10 Directory Server and Active Directory Scenario

Directory Server and Active Directory physical deployment.

Component Distribution

Host is a Directory Server installed in a Solaris operating system. The root suffix for the Directory Server being synchronized is dc=corp,dc=example,dc=com.

This machine contains: