To Change the Configuration Password for Identity Synchronization for Windows:

1. Stop all Identity Synchronization for Windows processes (for example, System Manager, Central Logger, Connectors, Console, Installers/Uninstallers).
2. After stopping all the processes, back up the ou=Services tree by exporting the configuration directory toldif.
3. Type theidsync changepw command as follows:

   idsync changepw [-D bind-DN] -w bind-password | - 
   [-h Configuration Directory-hostname] [-p Configuration Directory-port-no] 
   [-s rootsuffix] -q configuration_password 
   [-Z] [-P cert-db-path] [-m secmod-db-path] 
   -b new password | - [-y]

   For example:

   idsync changepw -w admin password -q old config password -b -q new config password

   The following arguments are unique to changepw:

   
   

   Argument Description -b password Specifies a new configuration password. The - value reads the password from standard input (STDIN). [-y] Does not prompt for command confirmation.

4. Respond to the messages that display in the terminal window. For example,

   Are you sure that want to change the configuration password (y/n)? yes
   Before restarting the system - 
   you must edit the $PSWHOME/resources/SystemManagerBootParams.cfg file
   and change the ’deploymentPassword’ to the new value.
   
   SUCCESS

5. You must modify the SystemManagerBootParams.cfg file before restarting the system.

   The SystemManagerBootParams.cfg file in $PSWHOME\resources (where $PSWHOME is the isw-installation directory ) contains the configuration password the system manager uses to connect to the configuration directory.

   For example, you would change the password value as follows:

   From: Parameter name="manager.configReg.deploymentPassword" value=" oldpassword"/

   To: Parameter name="manager.configReg.deploymentPassword" value= "newpassword "/

6. If the program reports any errors, restore the configuration directory using the ldif from Using changepw and then try again. The most likely reason for an error is that the Directory Server hosting the configuration directory became unavailable during the password change.

Using importcnf

After installing Core (Chapter 3, Installing Core), use the idsync importcnf subcommand to import your exported Identity Synchronization for Windows version 1.0 or 1.1 (SP1) configuration XML file, which contains Core configuration information.

To import your version 1.0 configuration XML file, open a terminal window (or Command Window) and type the idsync importcnf command as follows:

idsync importcnf [-D bind-DN] -w bind-password | - 
[-h Configuration Directory-hostname] [-p Configuration Directory-port-no] 
[-s rootsuffix] -q configuration_password [-Z] [-P cert-db-path] 
[-m secmod-db-path] -f filename [-n]

For example:

idsync importcnf -w admin_password -q configuration_password -f “MyConfig.cfg”

The following arguments are unique to importcnf:

Table A-5 idsync importcnf Arguments

After importing the version 1.0 configuration XML file, you must run prepds on all Directory Server sources configured for synchronization, (see Using prepds connectors and subcomponents.

Using prepds

You use the console or prepds subcommand to prepare a Sun Java System Directory Server source for use by Identity Synchronization for Windows. You must run prepds before installing the Directory Server Connector.

Running the idsync prepds subcommand applies the appropriate ACI to the cn=changelog entry, which is the root node of the Retro-Changelog database.

If you are preparing a preferred master Directory Server for use by Identity Synchronization for Windows, you must provide Directory Manager credentials.

The Directory Manager user is a special user on Directory Server who has full rights anywhere inside the Directory Server instance. (ACI does not apply to Directory Manager users.)

For example, only the Directory Manager can set the access control for the Retro-Changelog database, which is one of the reasons why Identity Synchronization for Windows requires Directory Manager credentials for the preferred master server.

To prepare a Sun Java System Directory Server source, open a terminal window (or a Command Window) and type the idsync prepds command as follows:

For single host:

idsync prepds [-h <hostname>] [-p <port>] [-D <Directory Manager DN>] -w <password> 
-s <database suffix> [-x] [-Z] [-P <cert db path>] [-m <secmod db path>]

For multiple hosts:

idsync prepds -F <filename of Host info> -s <root suffix> [-x] [-Z] 
[-P <cert db path>][-m <secmod db path>] [-3]

For example:

isw-hostname\bin>idsync prepds -F isw-hostname\samples\Hosts.xml \
-s ou=isw_data

Using prepds describes the arguments that are unique to idsync prepds.

Table A-6 prepds Arguments

If you are running idsync prepds in a replicated environment, (for example, where you have a preferred master, a secondary master, and two consumers), you only need to run idsync prepds once for the preferred and secondary masters.