JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle Identity Synchronization for Windows 6.0 Installation and Configuration Guide
search filter icon
search icon

Document Information

Preface

Part I Installing Identity Synchronization for Windows

1.  Understanding the Product

2.  Preparing for Installation

3.  Installing Core

4.  Configuring Core Resources

5.  Installing Connectors

6.  Synchronizing Existing Users and User Groups

7.  Removing the Software

8.  Configuring Security

9.  Understanding Audit and Error Files

Part II Identity Synchronization for Windows Appendixes

A.  Using the Identity Synchronization for Windows Command Line Utilities

B.  Identity Synchronization for Windows LinkUsers XML Document Sample

C.  Running Identity Synchronization for Windows Services as Non-Root on Solaris

D.  Defining and Configuring Synchronization User Lists for Identity Synchronization for Windows

E.  Identity Synchronization for Windows Installation Notes for Replicated Environments

Index

Numbers and Symbols

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

A

access rights
To Configure and Create Windows Active Directory Servers in a Network
Message Queue Access Controls
Restricting Access to the Configuration Directory
Using prepds
account lockout, Configuring and Synchronizing Account Lockout and Unlockout
accountlockout, Arguments, Description, Syntax, Using accountlockout
accounts
built-in, To Execute the forcepwchg Command line Utility
creating
Creating Accounts Without Passwords
To Install the Directory Server Connector
To Run services as a Non-root User
ACIs
Restricting Access to the Configuration Directory
Using prepds
activations, Specifying How Object Modifications Flow
Active Directory
advanced security options
To Configure and Create Windows Active Directory Servers in a Network
Requiring Trusted SSL Certificates
attributes
Object Classes
Selecting and Mapping Attributes
To Edit Creation Attributes Mapping or Values
certificate database, To Configure and Create Windows Active Directory Servers in a Network
importing certificates, Enabling SSL in the Active Directory Connector
certificates
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
Requiring Trusted SSL Certificates
Securing Replicated Configurations
Enabling SSL in the Active Directory Connector
change detection, How Active Directory Connectors Detect Changes
component distribution example, Component Distribution
configuring Core, Core Configuration
configuring SSL
Configuring Windows for SSL Operation
Configuring Windows for SSL Operation
To Create a New Sun Java System Directory Source
To Create a New Sun Java System Directory Source
connector distribution, Before You Begin
connector-domain controller communication, Reliable Synchronization
connectors, installing, Installing an Active Directory Connector
creating directory sources, Creating an Active Directory Source
creating SULs, Creating Synchronization User Lists
creation expressions, To Identify and Link User Types Between Servers
deployments, Creating an Active Directory Source
detecting changes, How Active Directory Connectors Detect Changes
directories, Directories
directory sources
Creating an Active Directory Source
Installing the Directory Server Connector
domain controllers
Reliable Synchronization
Physical Deployment
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
domains
Creating an Active Directory Source
To Configure and Create Windows Active Directory Servers in a Network
Understanding Synchronization User List Definitions
Configuring Multiple Windows Domains
editing attributes, To Edit Creation Attributes Mapping or Values
editing domain controller configuration parameters, To Configure and Create Windows Active Directory Servers in a Network
enabling secure communication, To Create a New Sun Java System Directory Source
failover servers, To Configure and Create Windows Active Directory Servers in a Network
global catalogs
Core Configuration
Creating an Active Directory Source
To Configure and Create Windows Active Directory Servers in a Network
hosts
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
installing connectors
Active Directory Connector
Installing an Active Directory Connector
linking users
Linking Users
idsync resync Options
mapping attributes, Selecting and Mapping Attributes
multiple domains
Understanding Synchronization User List Definitions
Configuring Multiple Windows Domains
object creation flow, To Specify How Object Creations Should Flow Between Directory Server and Active Directory Systems
object deletions flow, To Specify how Deleted Entries Flow Between Directory Server and Active Directory Systems
objectclasses, Object Classes
on-demand password synchronization
Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
Reliable Synchronization
Resynchronizing Users or Groups
password policies
Synchronizing Passwords With Active Directory
Active Directory Password Policies
physical deployment, Physical Deployment
pre-existing users, Checking Results in the Central Log
Primary Domain Controller FSMO role owner, To Configure and Create Windows Active Directory Servers in a Network
propagating passwords, Configuring Windows for SSL Operation
resync interval, To Configure and Create Windows Active Directory Servers in a Network
sample deployment example, Deployment Example: A Two-Machine Configuration
security options, To Configure and Create Windows Active Directory Servers in a Network
selecting attributes, Selecting and Mapping Attributes
sources
creating, To Create Directory Sources
special users, Checking Results in the Central Log
SSL, using
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
Using SSL
SSL and 3DES Keys Protection Summary
Enabling SSL in the Active Directory Connector
supported versions, Understanding the Product
synchronization settings
Deployment Example: A Two-Machine Configuration
Synchronization Settings
synchronizing activations/inactivations, Configuring and Synchronizing Object Activations and Inactivations
synchronizing attributes
To Create a New Sun Java System Directory Source
Selecting and Mapping Attributes
synchronizing deletions, Specifying How Deletions Flow
synchronizing passwords
Deployment Example: A Two-Machine Configuration
Synchronizing Passwords With Active Directory
To Create a New Sun Java System Directory Source
synchronizing users, idsync resync Options
trusted certificates
To Configure and Create Windows Active Directory Servers in a Network
Requiring Trusted SSL Certificates
Securing Replicated Configurations
user authentication failure, Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
user DNs, To Configure and Create Windows Active Directory Servers in a Network
using multiple domain controllers, To Configure and Create Windows Active Directory Servers in a Network
using SSL
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
Using SSL
SSL and 3DES Keys Protection Summary
Enabling SSL in the Active Directory Connector
adding
attribute values, To Edit Creation Attributes Mapping or Values
certificates
Adding Directory Server Certificates to the Directory Server Connector
Using certinfo
configuration data to Directory Server, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
credentials to Administrators group, To Create a New User Other Than admin
directory sources
To Create Directory Sources
To Prepare your Directory Server Source
To Deploy Identity Synchronization for Windows on Windows NT
indexes
Using prepds
To run idsync prepds
users to Active Directory
Active Directory Password Policies
Active Directory Password Policies
Administration Server
enabling SSL communication, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
installing, Installing Core
installing Core, Core
URL location, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
administrators
credentials/privileges
Core Installation
Connector Installation and Configuring the Directory Server Plug-In
To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
Creating Configuration Directory Credentials
filtering from SULs, To Identify and Link User Types Between Servers
linking users, Linking Users
preparing Directory Server
Preparing Sun Directory Source
Using prepds
providing (bind) distinguished name
To Create a New Sun Java System Directory Source
To Configure and Create Windows Active Directory Servers in a Network
restricting access, Restricting Access to the Configuration Directory
resynchronizing directory sources, Resynchronizing Users or Groups
running uninstall.cmd scripts, Planning for Uninstallation
user distinguished names, To Configure and Create Windows Active Directory Servers in a Network
advanced security options, specifying, To Configure and Create Windows Active Directory Servers in a Network
alias directory, Retrieving the CA Certificate from the Directory Server Certificate Database
aliases, certificate, Message Queue Self-Signed SSL Certificate
arguments
certinfo, Arguments
changepw subcommand, To Change the Configuration Password for Identity Synchronization for Windows:
command line utilities, Common Arguments to the Idsync Subcommands
forcepwchg, To Execute the forcepwchg Command line Utility
importcnf, Common Arguments to the Idsync Subcommands
password, Entering Passwords
prepds, Using prepds
printstat, Using printstat
resetconn, Using resetconn
resync
idsync resync Options
idsync resync Options
Using resync
Using resync
stopsync, Using stopsync
attribute modification flow, Specifying Direction
attributes
AvoidPdcOnWan, To Configure and Create Windows Active Directory Servers in a Network
creating parameterized default values, Parameterized Attribute Default Values
creation, Attribute Types
description, Attributes and Attribute Mapping
dspswuserlink
Linking Users
Using prepds
editing, To Edit Creation Attributes Mapping or Values
indexing, idsync resync Options
inetorgperson, Mapping Attributes
mandatory creation
Attribute Types
To Select and Map Attributes for Synchronization
mapping
Mapping Attributes
Selecting and Mapping Attributes
naming, Creating Synchronization User Lists
nsAccountLock
To Synchronize Object Activations/Inactivations:
To Synchronize Object Activations/Inactivations:
To Synchronize Object Activations/Inactivations:
objectguid, Linking Users
PwdLastSet, Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
resynchronizing, Resynchronizing Users or Groups
selecting
Object Classes
Selecting and Mapping Attributes
To Change the Default Schema Source
significant, Attribute Types
synchronizing user entry
Core Configuration
Selecting and Mapping Attributes
types, Attribute Types
uid, idsync resync Options
user, Mapping Attributes
USNchanged
How Active Directory Connectors Detect Changes
Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
audit.log, Error Messages
description
Central Logger
Central Logs
linking and resynchronizing results, Using resync
location
Central Logs
To View Your Error Logs
purpose, Central Logs
auditing, enabling on Windows NT, Enabling Auditing on a Windows NT Machine
authentication
client, Using the forcepwchg Migration Utility
connecting to configuration directory, Common Arguments to the Idsync Subcommands
failures
Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
on-demand password synchronization, Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
auxiliary objectclasses
configuring, Object Classes
removing, To Change the Default Schema Source
selecting
To Change the Default Schema Source
To Change the Default Schema Source
AvoidPdcOnWan attribute, To Configure and Create Windows Active Directory Servers in a Network