JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle Identity Synchronization for Windows 6.0 Installation and Configuration Guide
search filter icon
search icon

Document Information

Preface

Part I Installing Identity Synchronization for Windows

1.  Understanding the Product

2.  Preparing for Installation

3.  Installing Core

4.  Configuring Core Resources

5.  Installing Connectors

6.  Synchronizing Existing Users and User Groups

7.  Removing the Software

8.  Configuring Security

9.  Understanding Audit and Error Files

Part II Identity Synchronization for Windows Appendixes

A.  Using the Identity Synchronization for Windows Command Line Utilities

B.  Identity Synchronization for Windows LinkUsers XML Document Sample

C.  Running Identity Synchronization for Windows Services as Non-Root on Solaris

D.  Defining and Configuring Synchronization User Lists for Identity Synchronization for Windows

E.  Identity Synchronization for Windows Installation Notes for Replicated Environments

Index

Numbers and Symbols

A

B

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

C

CA certificates
adding
Requiring Trusted SSL Certificates
Adding Directory Server Certificates to the Directory Server Connector
automatic installations, To Configure and Create Windows Active Directory Servers in a Network
component requirements, Securing Replicated Configurations
enabling SSL, Enabling SSL in the Active Directory Connector
importing, Usage
retrieving
Retrieving the CA Certificate from the Directory Server Certificate Database
To Add Active Directory Certificate to the Connector's Certificate Database
To Add the Active Directory CA certificate to the Directory Server Certificate Database
catalogs, global
multiple, Creating an Active Directory Source
protecting, SSL and 3DES Keys Protection Summary
purpose, Core Configuration
specifying
To Configure and Create Windows Active Directory Servers in a Network
To Configure and Create Windows Active Directory Servers in a Network
central log directories
Default Paths
Central Logs
central logger
clogger 100 directories, Local Component Logs
description, Central Logger
local logs, Local Component Logs
messages, Central Logs
troubleshooting problems, Central Logs
centralized
logs, Central Logs
system auditing, Product Features
certificate database
adding certificates, Adding Directory Server Certificates to the Directory Server Connector
default path, Default Paths
directories
To Add Active Directory Certificate to the Connector's Certificate Database
To Add the Directory Server Certificates to the Directory Server Connector
required certificates, Using idsync certinfo
retrieving certificates, Retrieving the CA Certificate from the Directory Server Certificate Database
specifying location, Common Arguments to the Idsync Subcommands
certificates
accepting, Configuration Directory Certificate Validation
Active Directory
To Configure and Create Windows Active Directory Servers in a Network
Enabling SSL in the Active Directory Connector
adding, Adding Directory Server Certificates to the Directory Server Connector
aliases, Message Queue Self-Signed SSL Certificate
CA
Requiring Trusted SSL Certificates
Securing Replicated Configurations
certinfo subcommand, Using certinfo
Directory Server, Retrieving the CA Certificate from the Directory Server Certificate Database
exporting, Retrieving the CA Certificate from the Directory Server Certificate Database
getting information, Using the idsync command
importing, To Add Active Directory Certificate to the Connector's Certificate Database
installing, Message Queue Self-Signed SSL Certificate
requiring
To Configure and Create Windows Active Directory Servers in a Network
Requiring Trusted SSL Certificates
Using idsync certinfo
retrieving
Retrieving the CA Certificate from the Directory Server Certificate Database
Retrieving an Active Directory Certificate
self-signed
Message Queue Self-Signed SSL Certificate
Enabling SSL in Directory Server
SSL
To Configure and Create Windows Active Directory Servers in a Network
Requiring Trusted SSL Certificates
Configuration Directory Certificate Validation
using certinfo subcommand
Using the Command-Line Utilities
Using the idsync command
using certutil, Retrieving an Active Directory Certificate
using idsync certinfo, Using idsync certinfo
validating
Message Queue Client Certificate Validation
Message Queue Client Certificate Validation
Configuration Directory Certificate Validation
viewing information, Using certinfo
certinfo subcommand
adding certificates, Using certinfo
arguments
Arguments
Arguments
description
Using the Command-Line Utilities
Using the idsync command
displaying certificate information, Using the idsync command
examples, Using certinfo
syntax, Using certinfo
using, Using idsync certinfo
certutil
default location, Enabling SSL in Directory Server
retrieving certificates, Retrieving an Active Directory Certificate
change detection
Connectors
Directory Server Plug-In
How Identity Synchronization for Windows Detects Changes in Directory Sources
Reliable Synchronization
To Create a New Sun Java System Directory Source
Change Detector subcomponents
Windows NT Connector Subcomponents
Windows NT Connector and Subcomponents
Installing Connectors and Configuring Directory Server Plug-In
To Execute the forcepwchg Command line Utility
changepw subcommand
arguments
Using changepw
To Change the Configuration Password for Identity Synchronization for Windows:
changing passwords, Using changepw
description
Using the Command-Line Utilities
Using the idsync command
Using changepw
examples, Using changepw
syntax
Using changepw
To Change the Configuration Password for Identity Synchronization for Windows:
changing
configuration passwords, Using the idsync command
default schema sources, Changing the Schema Source
channel communication, encrypting, To Create a New Sun Java System Directory Source
checklists, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
installation
Installation Checklists
Installation Checklists
clear-text passwords
capturing, How Directory Server Connectors Detect Changes
obtaining, Propagating Password Updates
propagating, Propagating Password Updates
using Password Filter DLL, Using the Password Filter DLL to Obtain Clear-Text Passwords
client, authentication, Using the forcepwchg Migration Utility
command line utilities
common arguments, Common Arguments to the Idsync Subcommands
common features, Common Features
description
Command-Line Utilities
Using the Command-Line Utilities
Using the Identity Synchronization for Windows Command Line Utilities
entering passwords, Entering Passwords
idsync resync, Resynchronizing Users or Groups
using
Using the Command-Line Utilities
Using the Identity Synchronization for Windows Command Line Utilities
commands
descriptions, Using the Command-Line Utilities
imq start
Starting and Stopping Services
Starting and Stopping Services
isw stop
Starting and Stopping Services
Starting and Stopping Services
communication
enabling SSL
To Create a New Sun Java System Directory Source
To Create a New Sun Java System Directory Source
To Create a New Sun Java System Directory Source
Last Communication, To View the Status of your Directory Sources
components
configuration directory, Configuration Directory
Console, Console
Core
Core
Installing Core
descriptions, System Components
distribution
System Components Distribution
Component Distribution
distribution example, Component Distribution
IDs, Central Logs
local logs
Central Logs
Local Component Logs
logging levels, Reading the Logs
messages, Central Logs
physical deployment example, Physical Deployment
configuration directory
administrator name/password
To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
To Restart and Run the Installation Program
connecting to, Common Arguments to the Idsync Subcommands
credentials, Creating Configuration Directory Credentials
default port, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
description, Configuration Directory
description/explanation, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
encrypting configuration information, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
hostname/port number
idsync resync Options
Using resync
purpose
Core Installation
Connector Installation and Configuring the Directory Server Plug-In
querying, To Create a New Sun Java System Directory Source
reading/writing to, Configuration Directory
restricting access, Restricting Access to the Configuration Directory
specifying credentials, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
specifying host/port, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
URL
Core Installation
To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
To Restart and Run the Installation Program
validating certificates, Configuration Directory Certificate Validation
configuration passwords
changing
Using the idsync command
Using changepw
finding, To Change the Configuration Password for Identity Synchronization for Windows:
protecting, Configuration Password
specifying, Specifying a Configuration Password
using idsync changepw, Using changepw
Configuration tab, To Open Identity Synchronization for Windows Console
description, To Open Identity Synchronization for Windows Console
configurations, deployment decisions, Installation and Configuration Decisions
configuring
activations/inactivations, Configuring and Synchronizing Object Activations and Inactivations
attribute synchronization, Propagating User Attributes Between Systems
Core
Sun Welcomes Your Comments
Core Configuration
Installation Checklists
Configuring Core Resources
filters, To Configure Multiple Windows Domains
log files, To Configure Logging for Your Deployment
Message Queue, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
multiple domains, Understanding Synchronization User List Definitions
multiple suffixes, Configuring Replication
security, Configuring Security
SSL, Configuring Windows for SSL Operation
suffixes, To Create a New Sun Java System Directory Source
To Do list, Installation Overview
validation, To Save your Current Configuration from the Console Panels
connectors
Active Directory, Before You Begin
bidirectional synchronization, Connectors
description, Connectors
detecting changes
How Directory Server Connectors Detect Changes
How Active Directory Connectors Detect Changes
How Windows NT Connectors Detect Changes
Directory Server, Installing the Directory Server Connector
distribution, Before You Begin
installing
Directory Server Connector and Plug-in
Active Directory Connector
Windows NT Connector and Subcomponents
To Save your Current Configuration from the Console Panels
Installing Connectors
launching/monitoring, Watchdog Process
printing status
Using the idsync command
Using printstat
restarting, Connectors
states
Using the idsync command
Using resetconn
troubleshooting, Central Logs
using idsync printstat, Using the idsync command
Watchdog process, Watchdog Process
Windows NT, Installing the Windows NT Connector
consoles
configuring Core, Configuring Core Resources
description
Console
Installing Core
To Open Identity Synchronization for Windows Console
Directory Server, To Synchronize Object Activations/Inactivations:
Identity Synchronization for Windows
Console
To Open Identity Synchronization for Windows Console
To View the Status of your Directory Sources
To View the Remaining Steps of the Installation and Configuration Process
To View Your Error Logs
installing, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
logging in, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
passwords, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
reading/writing to configuration directory, Configuration Directory
starting
To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
starting/stopping synchronization, To Start or Stop Synchronization
Sun Java System Console, Opening the Identity Synchronization for Windows Console
uninstalling, Uninstalling the Console Manually
viewing logs, Understanding the Logs
Core
checklists
Installation Checklists
Installation Checklists
components
System Components
Installing Core
configuring
Sun Welcomes Your Comments
Core Configuration
Installation Checklists
Configuring Core Resources
description, Core
enabling SSL, To Restart and Run the Installation Program
installation privileges
Installing Core
Installing Core
installing
Core
Core Installation
Installation Checklists
Installing Core
uninstalling
Planning for Uninstallation
To Uninstall Core
To Uninstall Core
Watchdog, Watchdog Process
creating
accounts
Creating Accounts Without Passwords
To Install the Directory Server Connector
To Run services as a Non-root User
Active Directory Sources, To Create Directory Sources
Active Directory sources, Creating an Active Directory Source
NT Registry Directory Sources, To Create Directory Sources
parameterized default attribute values, Parameterized Attribute Default Values
Retro-Changelog database, Preparing Sun Directory Source
SULs
Synchronization User Lists
Synchronizing Passwords With Active Directory
Creating Synchronization User Lists
Sun Java System Directory Sources
To Create Directory Sources
Creating a Sun Java System Directory Source
Sun Java System directory sources, Creating a Sun Java System Directory Source
Windows 2003 Server directory sources, Synchronizing Passwords With Active Directory
Windows 2003 Server global catalogs, Synchronizing Passwords With Active Directory
Windows NT directory sources, To Deploy Identity Synchronization for Windows on Windows NT
creating indexes, To Prepare your Directory Server Source
creation attributes
creating, To Specify How Object Creations Should Flow Between Directory Server and Active Directory Systems
deleting, To Specify How Object Creations Should Flow Between Directory Server and Active Directory Systems
description, Attribute Types
editing, To Specify How Object Creations Should Flow Between Directory Server and Active Directory Systems
mandatory
Selecting and Mapping Attributes
To Select and Map Attributes for Synchronization
mapping, To Specify New Creation Attributes
parameterized default values, Parameterized Attribute Default Values
creation expressions
Synchronization User Lists
To Identify and Link User Types Between Servers
creation flows
enabling, Deployment Example: A Two-Machine Configuration
planning configuration, Core Configuration
specifying
To Specify How Object Creations Should Flow Between Directory Server and Active Directory Systems
To Edit Creation Attributes Mapping or Values
To Remove Creation Attributes Mapping or Values
credentials/privileges, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
configuration directory, Creating Configuration Directory Credentials
configuration Directory Server, Connector Installation and Configuring the Directory Server Plug-In
creating credentials, Creating Configuration Directory Credentials
Directory Server, Directory Credentials
installing Core
Installing Core
Installing Core
required for connectors, Directory Credentials
required for idsync prepds, Using prepds
specifying, To Configure and Create Windows Active Directory Servers in a Network
specifying for configuration directory, To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
custom methods, To Synchronize Object Activations/Inactivations: