Initializing the Connector State

To initialize the connector state for the failover configuration, synchronization must be started. Before synchronization can be started, the Identity Synchronization for Windows Plug-in must be enabled on both master3-eu.gt.com and master4-eu.gt.com to point to the failover configuration. After the plug-in has been enabled and the directory servers have been restarted, synchronization can be started. Verify that both connectors have entered the SYNCING state, by using the console or the idsync printstat command:

bash-2.05# ./idsync printstat -w <password omitted\> -q <password omitted\>
Exploring status of connectors, please wait
Connector ID: CNN100
     Type: Sun Java(TM) System Directory
     Manages:  dc=gt,dc=com (ldaps://master3-eu.gt.com:636)
    (ldaps://master4-eu.gt.com:636)
     State: SYNCING
     Installed on:  connectors-eu.gt.com
     Plugin SUBC100 is installed on ldaps://master3-eu.gt.com:636
     Plugin SUBC101 is installed on ldaps://master4-eu.gt.com:636

Connector ID: CNN101
     Type: Active Directory
     Manages: gt.com (ldaps://ad1-us.gt.com:636) (ldaps://ad2-us.gt.com:636)
    (ldaps://ad4-eu.gt.com:636) (ldaps://ad3-eu.gt.com:636)
     State: SYNCING
     Installed on:  connectors-eu.gt.com

Sun Java(TM) System Message Queue Status:  Started

Checking the System Manager status over the Sun Java(TM) System Message Queue.

System Manager Status:  Started
SUCCESS

After synchronization has started, modify a user password in both Active Directory and Directory Server, which will force the connectors to persist their state. To verify, do the following:

• Directory Server Connector. On this connector, check for the presence of the /var/opt/SUNWisw/persist/ADP100/accessor.state file. Check that the highestacknowledgedchangenumber value stored in the file is not -1. (To determine the appropriate ADP subdirectory of persist, find the connector ID using the console or idsync printstat, then replace CNN with ADP in the connector ID.)

• Active Directory Connector. On this connector, check that it actually propagated the change. An INFO message that includes the usnchanged value should appear in the central log, for example:

  				[05/Nov/2004:14:07:38.982 -0600] INFO    18  CNN101 connectors-eu  
  				"The agent is sending the following inbound action to MQ: 
  				Type: MODIFY SUL: GT_USERS {Data Attrs: } {Other Attrs: cn: Jane Test 
  				dn: CN=Jane Test,CN=Users,DC=gt,DC=com objectclass: top,person, 
  				organizationalPerson, user dspswuserlink: Rwyr9YEFk0WYxbFP5Nnrjg== pwdlastset: 
  				127441696561778218 samaccountname: 3aa00test100001 sn: test100001 usnchanged: 120831 
  				whenchanged: 20041105230736.0Z passwordchanged: TRUE}." 
  				(Action ID=CNN102-1000A5846CB-5, SN=2)

After you have verified that both connectors have check-pointed their state, stop synchronization for the failover installation. Then, reinstall the Directory Server Plug-ins on master3-eu.gt.com and master4-eu.gt.com to point to the primary configuration.