Index

A B C D E F G H I J L M N O P R S T U W X

Symbols

%TEMP% environment variable, C.2.2

A

accessor connector layers, C.1.2

accessor.level, C.2.1

accessor.saint.level, C.2.1

accounts, new user, 2.1.2

action ID types, C.1.1

actions, C.1.1, C.1.2, C.1.2, C.1.2, Glossary, Glossary, Glossary

Active Directory

changing passwords, B.3

connector layers, C.1.2

deleted entries, 2.1.2

deployment considerations, 1.1

domains, 2.1.1.3

failover configuration, 3.3.1

global setting, 3.3.1

inactive accounts, 2.1.2

new users, 2.1.2

password changes, B.3

samaccountname, 2.1.1.3

special users, 2.2.1

synchronization user lists, 2.2.5.1

activedirectorydomainname attribute, 2.2.8.1

administration rights, 2.2.1.1

agent connector layers, C.1.2

agent.level, C.2.1

agentout.level, C.2.1

attributes

activedirectorydomainname, 1.1, 2.2.8.1

configuring, 2.2.4.1

data, C.1.1

destinationindicator, 2.2.7, 2.2.7, 2.2.7, 2.2.7.1, 2.2.8.1

dspswuserlink, 2.1.2, 2.2.7, 2.2.9.1

dspswvalidate, 2.2.7

mapping, 2.2.4.3.1

mappings, 2.2.4.3.1

modification settings, 2.2.4.2

nsslapd-infolog-area, C.1.3

nsslapd-infolog-level, C.1.3

other, C.1.1

pwdlastset, C.1.2

samaccountname, 2.1.1.3, 2.2.7, 3.1.2

shadowmax, 2.2.4.8

shadowmin, 2.2.4.8

shadowwarning, 2.2.4.8

uid=PSWConnector, 2.2.1

user_name, 2.1.1.2

user_nt_domain_name, 2.2.8.1

userPassword, 2.2.7

audit logging, C

audit.log, C.1.2

authentication

Active Directory, A

denying, A.2.4.3

domain controllers, 3.13

editing /etc/nsswitch.conf, A.2.4.3

editing /etc/pam.conf, A.2.4.3, A.2.4.3, A.2.4.3, A.2.4.3.1

for failover, 3.13

on Solaris, 2.1.1.1, A.1, A.2.4

on Windows, A.2.2

over TLS, A.3

rules, A.2.4.3

using PAM, A.1, A.2.4, A.2.4.3

authentication certificates, Glossary

B

Base DNs, A.2.1

brokers, Message Queue, 3.7, 3.7.1, 3.7.1, 3.7.2, Glossary, Glossary

C

central log directories, Preface

Central Logger

enabling debug logging, C.2.1

log locations, C.5

out-of-order messages, C.1.2

plugin logging, 3.14.3

processing logs, C.2.1

central logs, C.1.2, C.4, Glossary

centralLogger component, C.2.1

Certificate Authority, 1.1, 3.4, 3.4, Glossary

certificate database

default path, Preface

certificate databases, 1.1, 3.4, 3.4, 3.4, Glossary

certificates

Active Directory, 3.4

Active Directory SSL, 1.1

adding to certificate databases, 3.4

authentication, Glossary, Glossary

Certificate Authority, 1.1, 3.4

component requirements, 3.4

configuring connectors, A.3

definition, Glossary

Directory Server, 3.4, 3.4

trusted, 3.1.3, 3.3.1, 3.4, 3.4, 3.4

using Certificate Authorities, 3.4

using with plugins, 3.3.1

using with SSL, 1.1, 3.1.3, 3.3.1, 3.4

change detection

action paths, C.1.2, Glossary, Glossary

Active Directory, 2.2.9, 3.7.1, 3.8.2, B.6.1.2

connectors, 1.1, 2.2.3.1, 3.2.1, 3.8.2, 3.10, 3.10.1, 3.10.1, 3.12, Glossary

controller, C.1.2, Glossary

Directory Server, 1.1, 2.2.3.1, 2.2.9, 3.2.1, 3.10.1, 3.10.1, Glossary, Glossary

failover, 3.12

failures, 2.2.1.1, 3.12

Identity Manager, B.2, B.5

Identity Synchronization for Windows, 3.10, B.2, B.2, B.3, B.4, C.1.1

pwsync command, B.3, B.4

SUL filters, 2.2.5.1, 2.2.5.4, 2.2.5.4

Windows NT, C.3

Windows NT Change Detector, C.1, C.3

Change Detector, Windows NT, C.1

commands

idsync certinfo, 3.4, 3.4

idsync printstat, 3.3.1, 3.3.2, 3.11, 3.11, C.2.1

idsync resync, 1.1, 2.2.7, 2.2.9.4, 3.1.3, 3.2.2, 3.2.3, 3.5, 3.7, 3.12, B.6.3.1, C.1.2

idsync startsync, 3.3.1, 3.3.2, 3.14.2

idsync stopsync, 3.14.1

common.level, C.2.1

components

changing logs location, C.5

Core, Glossary, Glossary, Glossary

logging, C.2.1

trusting certificates, 3.4

configuring

attribute mappings, 2.2.4.3.1

Directory Server, 2.2.3.1, 3.1.1

failover domain, 2.2.3.3

Identity Manager, 3.9

preferred Directory Server, 3.3.2

shadowAccount object class, 2.2.4.6

synchronization user lists, 2.2.5.1

Windows NT, 2.2.3.4

connectors

changing log locations, C.5

definition, Glossary

initializing connector state, 3.10.1, 3.11

installing, 3.2.1, 3.6.1

layers, C.1.2

modification rate, 1.1

persisting states, 3.11

security requirements, 1.1, 3.1.3, A.3

uninstalling, 3.6.1

updating, 3.8.2

using in large deployments, 3.2.3

WAN deployments, 2.2.8.3

console.log, C.2.3

consoles

debug logging, C.2.3

validations, 2.2.5.4

controller connector layers, C.1.2

controller.level, C.2.1

Core

components, Glossary, Glossary, Glossary

configuring Directory Server, 3.3.1

CREATE actions, C.1.1

creating users, 2.1.2, 2.2.1

credentials

Active Directory, 3.13

bind, A.2.6.2, A.3

candidate, A.4

Directory Manager, Glossary

problems, 3.6.1

proxy, A.2.4.2

specifying, 2.2.3.3, A.2.4.2

crom.level, C.2.1

D

daemon, Identity Synchronization for Windows, 3.5, 3.6.1, 3.14.1, C.2.1, C.2.1, Glossary

data attributes, C.1.1

databases

certificate, 1.1, 3.4, 3.4, 3.4, Glossary

object cache, 3.7.1, 3.7.2, 3.8.2, 3.10.2, 3.12, C.1.2, Glossary

retro changelog, Glossary

suffixes, Glossary

debug logging, 3.7, C

debug page, B.6.1.2, B.6.2

debugErrors.log, C.2.1, C.2.1

debug.log, C.2.1, C.2.1

decryption routines, C.2.1

default locations, Preface

DELETE actions, C.1.1

deleting users, 2.1.2

deployment

examples, 2.1.1, 3.1

HA environments, 3

increasing connector worker threads, 3.5

large deployments, 3.2.3

performance requirements, 1.1

preparing for, 1.1

primary/failover configurations, 3.6

running idsync resync, 2.2.7, 3.7

synchronization direction, 1.1

with Identity Manager, B

destinationindicator attribute, 2.2.7, 2.2.7, 2.2.7, 2.2.7.1, 2.2.8.1

directory resources, deployment example, 2.1.1

Directory Server

changing passwords, B.4, B.4

configuring, 2.2.3.1, 3.1.1

configuring LDAP repository for PAM, A.2.1

connector layers, C.1.2

deleted entries, 2.1.2

deployment considerations, 1.1

deployment example, 2.1.1.1

hierarchical DIT, 2.1.3

idsync resync, 2.2.5.4

in HA environment over WAN, 3

in MMR environments, 2.1.1

inactive accounts, 2.1.2

isolating problems, C.6

LINK actions, C.1.1

masters, 1.1

new users, 2.1.2

PAM, 2.1.1.1

populating LDAP repository for PAM, A.2.3

preferred source, 2.2.3.1.1

preventing password change propagation, B.6.1.2

purpose, 2.1.1.1

secondary server, 2.2.3.1.1

uid, 2.1.1.2

using with Identity Manager, B.6.1

verifying synchronization, A.2.6

Directory Server Plugin, 1.1, 3.14.3, C.1, C.1.3

directory sources, specifying, 2.2.3.1.1

disabled accounts, 2.1.2

distinguished names, Glossary, Glossary, Glossary

DNS, A.2.1, A.2.1, A.2.4.2, A.2.4.2

domain controllers, B.6.2

architecture example, 2.1.1

authenticating, 3.13

definition, Glossary

deployment example, 3.1

failover, 2.2.3.3

for WAN deployment, 2.2.8.3

logs, C.8

PDC, A.4, B.1

PDC FSMO role owners, 2.2.3.3, 3.14.4

uSNChanged values, 3.7.1

with SSL, 3.4, 3.4

dspswuser auxiliary object class, 2.2.7

dspswuserlink attribute, 2.1.2, 2.2.7, 2.2.9.1

dspswvalidate attribute, 2.2.7

E

encryption keys, 3.6, 3.14.3, 3.14.5

encryption.level, C.2.1

environment variables

%TEMP%, C.2.2

ISW_DEBUG_INSTALL, C.2.2

environments

Active Directory, A

changing passwords, 3.1.3

high-availability over WAN, 3

Identity Synchronization for Windows and Identity Manager cohabitation, B

MMR, 2, Glossary, Glossary

NT, A

Solaris 8, A.2.1

using PAM, A.1

WAN, 2.2.8.3

Windows NT, A.4

Example Bank deployment example, 2

executing

periodic resynchronization, 3.8

F

failover

Active Directory connector, 3.10.2

Directory Server connector, 3.10.1

domain controllers, 2.2.3.3

installation, 3.3.2, 3.3.2, 3.6, 3.8.2, 3.8.2, 3.12, 3.14.2, 3.14.6

maintenance, 3.12

monitoring logs, 3.14.5

starting synchronization, 3.14.2, 3.14.2

stopping synchronization, 3.14.1

failures, detecting, 3.8.2

features, 1, 2.1.3

DIT, 2.1.3

moving users, 2.1.3

SUL filters, 2.1.3

WAN deployments, 2.1.3

filters, using, 2.2.5.1, 2.2.5.4, 3.2.2, 3.7.1

form property, configuring, B.6.1.1

G

Global Catalog, 2.2.3.3, Glossary

global setting, Active Directory, 3.3.1

Global Telco

configuration, 3.2

configuring Directory Server, 3.3.1

on-demand synchronization, 3.3.1

primary installation, 3.2.1

requirements, 3.1.3

Globally Unique Identifier. See GUIDs, 2.1.2

GUIDs, 2.1.2, 2.1.2, C.1.1

H

High Encryption Pack, 1.1

high-availability environments, 3

hub replicas, 1.1, 3.1.1

I

Identity Manager

cohabitation with Identity Synchronization for Windows, B

Global Telco case study, 3.1, 3.8.1

password changes, 3.1.3, B.5

Identity Synchronization for Windows

failover installation, 3.3.2, 3.6, 3.8.2, 3.14.2, 3.14.6

primary installation, 3.3.1, 3.6.1, 3.7.1, 3.8.1, 3.8.2, 3.14.1, 3.14.5

idsconfig, A.2.1, A.2.1, A.2.1, A.2.4.2, A.3

idsync certinfo command, 3.4, 3.4

idsync command line interface, Glossary

idsync printstat command, 3.3.1, 3.3.2, 3.11, 3.11, C.2.1

idsync resync command

central log file, C.1.2

deployment example, 2.2.7

failover maintenance, 3.12

increasing connector worker threads, 3.5

initial operation, 3.7

linking users, 1.1, 2.2.5.4, 2.2.9.4, 3.1.3, 3.2.2, B.6.3.1

primary installation, 3.8.1

reducing peak load, 3.2.3

REFRESH action, C.1.1

idsync startsync command, 3.3.1, 3.3.2, 3.14.2

idsync stopsync command, 3.14.1

inactive accounts, 2.1.2, 2.1.2

increasing connector work threads, 3.5

initializing connector state, 3.10.1

installation

connectors, 3.2.1

failover, 3.3.2

install-path, Preface

instance-path, Preface

isw- hostname directory, Preface

ISW_DEBUG_INSTALL environment variable, C.2.2

J

Java Naming and Directory Interface, Preface

L

LANs, 2.2.8.3

layers, connector, C.1.2

LDAP

accessor, C.1.2

attributes, 2.2.4.8

communicating with domain controllers, 3.2.1

deployment considerations, 1.1

filters, 3.2.2, 3.7.1

maximum connections, 3.5

PAM, 2.1.1.1, 2.1.2, 2.2.4.6, A

sample URL, Glossary

shadowAccount object class, 2.2.4.6

LINK actions, C.1.1

linking users

idsync resync, 2.2.7

new users, 3.2.2

local log directory, Preface

logging

audit and debug, C

central logs, C.4

centralLogger, C.2.1

component logs, C.5

components, C.2.1

configuring Directory Server plugin, C.1.3

console logs, C.2.3

debug, 3.7

levels, 3.7

message samples, C.1.2

monitoring logs, 3.14.5

security logs, C.3

types, C.2.1

log.properties level, C.2.1

M

maintenance, failover, 3.12

manager.level, C.2.1

Message Queue, Preface

agent, C.1.2

broker description, Glossary

broker memory limits, 3.7, 3.7.1, 3.7.1, 3.7.2

isolating problems, C.7

migrating

Example Bank case study, 2.1.1.3

from NT to Active Directory, 2.2.7, 2.2.9

user passwords, 2.2.9.2

MMR environments, 2, 3.2.1, Glossary, Glossary

modification rate, 1.1

MODIFY actions, C.1.1

monitoring logs, 3.14.5, 3.14.5

mq.level, C.2.1

Multi-Master Replication. See MMR environments, 2

multiple object classes, 2.1.3

multiple passwords, setting, 3.6.1

N

new users

Active Directory, 2.1.2

creating, 1.1

Directory Server, 2.1.2

O

object cache databases, 3.7.1, 3.7.2, 3.8.2, 3.10.2, 3.12, C.1.2, Glossary

object classes

dspswuser, 2.2.7

shadowAccount, 2.2.4.6, 2.2.4.6, 2.2.8.2

on-demand synchronization, 3.3.1

P

PAM

configuring LDAP repository, A.2.1

Directory Server, 2.1.1.1

populating LDAP repository, A.2.3

verifying synchronization, A.2.6

Password Filter DLL, C.1, C.3

passwords

changing on Active Directory, B.3, B.3

changing on Directory Server, B.4, B.4

changing through Identity Manager, B.5

dspswvalidate attribute, 2.2.7

encrypting, 3.2.1, 3.6

Example Bank', 2.1.2

losing changes, 3.6

managing on Solaris, 2.1.1.1

on-demand synchronization, 2.2.3.3, 2.2.3.3, 3.2.1, 3.3.2, 3.4, 3.8.1, 3.13

preventing display in command line, 3.8.1

preventing propagation, B.6.1.2

propagating changes, 3.1.3

replicating to PDC FSMO role owner, 2.2.3.3

resetting, 3.8.1

running idsync resync, 3.7

setting multiple, 3.6.1

shadowmax attribute, 2.2.4.8

shadowmin attribute, 2.2.4.8

shadowwarning attribute, 2.2.4.8

specifying, 2.2.3.3

synchronizing, 1.1, 2.1.2, 2.2.7, 3.1.3

userPassword attribute, 2.2.7

PDC, 2.1.1.2, A.4, B.1

PDC FSMO role owners, 2.2.3.3, 2.2.8.3, 3.1.2, 3.3.1, 3.3.2, 3.14.4, 3.14.4

peak modification rate, 1.1

periodic resynchronization, 3.8, 3.8.1, 3.8.2

permissions, 2.2.1.1, 3.8.1, Glossary, Glossary

Pluggable Authentication Module. See PAM, 2.1.1.1

plugins

Directory Server, 1.1, 3.14.3, 3.14.3, C.1, C.1.3

Retro Changelog, 1.1

preparing for deployment, 1.1

Primary Domain Controller. See PDC, A.4

primary installation

configuring Directory Server, 3.3.1

Identity Synchronization for Windows, 3.3.1, 3.6.1, 3.7.1, 3.8.1, 3.8.2, 3.14.1, 3.14.5

provisioned users, B.6.3.1

psloglist.exe, C.3

pwdlastset attribute, C.1.2

pwsync, configuring, B.6.1.2

R

read-only replicas, 1.1, 3.1.1

REFRESH actions, C.1.1

reinstalling Directory Server plugins, 3.14.3

replicas

hub, 1.1, 3.1.1

read-only, 1.1, 3.1.1

replication agreements, 3.1.1

requirements

Example Bank, 2.1.2

Global Telco, 3.1.3

resync-batch.pl script, 3.7.1

resyncDebug.log, C.2.1, C.2.1, C.2.1

resynchronization, 3.7

resync.log, C.1.2

retro changelog, 3.10.1, Glossary

Retro Changelog Plugin, 1.1

rights, administration, 2.2.1.1

role owner, PDC FSMO, 3.14.4

S

s requirements, 2.1.2

samaccountname attribute, 2.2.7, 3.1.2

secondary servers, 2.2.3.1.1

security

configuring, 3.3.1, A.3

considerations, 1.1, C.2.1

logs, C.3

using TLS, A.1

SENTINEL actions, C.1.1

serverroot directory, Preface

setting up

Identity Manager, B.6.2

SSL, 3.4

Shadow Account

shadowmax, 2.2.4.8

shadowmin, 2.2.4.8

shadowwarning, 2.2.4.8

shadowAccount auxiliary object class, 2.2.4.6, 2.2.8.2

SLAMD Distributed Load Generation Engine, Preface

special users

administration rights, 2.2.1.1

creating, 2.2.1

delegating control, 2.2.1.1

permissions, 2.2.1.1

specifying

credentials, 2.2.3.3

directory sources, 2.2.3.1.1

passwords, 2.2.3.3

secondary servers, 2.2.3.1.1

SSL

certificates, 1.1

enabling, 1.1, 1.1

requirements, 1.1, 3.1.3

setting up, 3.4

with trusted certificates, 1.1, 3.1.3, 3.3.1, 3.4

starting synchronization failover, 3.14.2

suffixes, Glossary

SULs

description, Glossary

determining membership, C.1.2

purpose, 2.1.2

using filters, 2.2.5.1, 2.2.5.4

validating filters, 2.2.5.4

synchronization

starting, 3.14.2

stopping, 3.14.1

synchronization settings, 2.2.4.2

attribute mapping, 2.2.4.3.1

attribute settings, 2.2.4.1

shadowAccount object class, 2.2.4.6

Synchronization User Lists. See SUL, 2.1.2

synchronizing

inactive accounts, 2.1.2

passwords, 1.1, 2.1.2

users, 2.1.2

SYNCING state, 3.11

System Manager

checking status, 3.3.1, 3.3.2, 3.11

component logs location, C.5

description, Glossary

enabling debug logging, C.2.1

new configurations, 3.5

processing logs, C.2.1

T

tasks.level, C.2.1

TLS, A.1, A.3

Transport Layer Security. See TLS, A.1

troubleshooting, C

trust requirements, 3.4

trusted certificates, 1.1, 3.1.3, 3.3.1, 3.4, 3.4, 3.4

U

UNKNOWN actions, C.1.1

unlinking migrated users, 2.2.9.1

user accounts, eliminating, 2.1.2

user passwords

Change My Password Form, B.6.1.1

Change Password Form, B.6.1.1

Change User Password Form, B.6.1.1

changing on Active Directory, B.3, B.3

changing on Directory Server, B.4, B.4

changing through Identity Manager, B.5

dspswvalidate attribute, 2.2.7

encrypting, 3.2.1, 3.6

Example Bank, 2.1.2

losing changes, 3.6

migrating, 2.2.9.2

modifying, 3.11

on-demand synchronization, 2.2.3.3, 2.2.3.3, 3.2.1, 3.3.2, 3.4, 3.8.1, 3.13

preventing display in command line, 3.8.1

preventing propagation, B.6.1.2

propagating changes, 3.1.3, B.3, B.6.1.1

replicating to PDC FSMO role owner, 2.2.3.3

Reset User Password Form, B.6.1.1

resetting, 3.8.1

running idsync resync, 3.7

setting multiple, 3.6.1

shadowmax attribute, 2.2.4.8

shadowmin attribute, 2.2.4.8

shadowwarning attribute, 2.2.4.8

synchronization direction, 1.1

synchronizing changes, 2.2.4.1, 2.2.7, 3.1.3

userPassword attribute, 2.2.7, 2.2.7.2

user_nt_domain_name attribute, 2.2.8.1

userPassword attribute, 2.2.7

users

creating, 2.1.2, 2.2.1

deleting, 2.1.2

linking migrated, 2.2.9.2

moving between domains, 2.2.9.3

provisioned, B.6.3.1

synchronizing, 2.1.2

unlinking migrated, 2.2.9.1

uSNChanged values, 3.7.1

W

WAN deployments, 2.2.8.3, 2.2.8.3, 2.2.8.3, 2.2.8.3, 3

Windows

Global Catalog, 2.2.3.3, Glossary

Windows NT

Change Detector, C.1

configuring, 2.2.3.4

connector layers, C.1.2

Password Filter DLL, C.1

SUL_NT, 2.2.5.1

synchronization user lists, 2.2.5.1

user_name, 2.1.1.2

X

xml

form properties, B.6.1.1, B.6.1.1

link files, 2.2.7

linkusers-ad-only.cfg, 2.2.7, 2.2.7

xml.level, C.2.1