Index

A B C D E F G H I J K L M N O P Q R S T U V W X

Numerics

3DES keys, 8.1.4

A

access rights, 4.3.4.1, 8.1.6, 8.2.7, A.2.4

account lockout, 4.5.4

accountlockout

Arguments, Description, Syntax, A.2.9

accounts

built-in, A.3.1

creating, 2.3.1.3, 5.3.1.1, C.1.1

ACIs, 8.2.7, A.2.4

activations, 4.5.2

Active Directory

advanced security options, 4.3.4.1, 8.1.3

attributes, 2.2.3, 4.4.1, 4.5.1.3.1

certificate database, 4.3.4.1

importing certificates, 8.6

certificates, 4.3.4.1, 4.3.4.1, 4.3.4.1, 8.1.3, 8.3, 8.6

change detection, 1.4.2

component distribution example, 1.5.2

configuring Core, 2.5.2

configuring SSL, 2.4, 2.4, 4.3.2.1, 4.3.2.1

connector distribution, 5.1

connector-domain controller communication, 1.4.5

connectors, installing, 5.3.2

creating directory sources, 4.3.4

creating SULs, 4.6

creation expressions, 4.6.1

deployments, 4.3.4

detecting changes, 1.4.2

directories, 2.2.1

directory sources, 4.3.4, 5.3.1

domain controllers, 1.4.5, 1.5.1, 4.3.4.1, 4.3.4.1, 4.3.4.1

domains, 4.3.4, 4.3.4.1, D.1, D.2

editing attributes, 4.5.1.3.1

editing domain controller configuration parameters, 4.3.4.1

enabling secure communication, 4.3.2.1

failover servers, 4.3.4.1

global catalogs, 2.5.2, 4.3.4, 4.3.4.1

hosts, 4.3.4.1, 4.3.4.1, 4.3.4.1

installing connectors, 1.3.3, 5.3.2

linking users, 6.2.2, 6.2.3

mapping attributes, 4.4.1

multiple domains, D.1, D.2

object creation flow, 4.5.1.1

object deletions flow, 4.5.5.1

objectclasses, 2.2.3

on-demand password synchronization, 1.4.4.2, 1.4.5, 6.2.1

password policies, 2.3, 2.3.1.2

physical deployment, 1.5.1

pre-existing users, 6.3

Primary Domain Controller FSMO role owner, 4.3.4.1

propagating passwords, 2.4

resync interval, 4.3.4.1

sample deployment example, 1.5

security options, 4.3.4.1

selecting attributes, 4.4.1

sources

creating, 4.3.1

special users, 6.3

SSL, using, 4.3.4.1, 4.3.4.1, 8.1.2, 8.1.5, 8.6

supported versions, 1

synchronization settings, 1.5, 2.2.2

synchronizing activations/inactivations, 4.5.2.2

synchronizing attributes, 4.3.2.1, 4.4.1

synchronizing deletions, 4.5.5

synchronizing passwords, 1.5, 2.3, 4.3.2.1

synchronizing users, 6.2.3

trusted certificates, 4.3.4.1, 8.1.3, 8.3

user authentication failure, 1.4.4.2

user DNs, 4.3.4.1

using multiple domain controllers, 4.3.4.1

using SSL, 4.3.4.1, 4.3.4.1, 8.1.2, 8.1.5, 8.6

adding

attribute values, 4.5.1.3.1

certificates, 8.8, A.2.1

configuration data to Directory Server, 3.3.1

credentials to Administrators group, 8.2.2.1

directory sources, 4.3.1, 4.3.3.1, 4.3.5.1

indexes, A.2.4, A.2.4.1

users to Active Directory, 2.3.1.2, 2.3.1.2

Administration Server

enabling SSL communication, 3.3.1

installing, 3.3

installing Core, 1.3.1

URL location, 3.3.1

administrators

credentials/privileges, 2.5.1, 2.5.3, 3.3.1, 8.2.2

filtering from SULs, 4.6.1

linking users, 6.2.2

preparing Directory Server, 4.3.3, A.2.4

providing (bind) distinguished name, 4.3.2.1, 4.3.4.1

restricting access, 8.2.7

resynchronizing directory sources, 6.2.1

running uninstall.cmd scripts, 7.1

user distinguished names, 4.3.4.1

advanced security options, specifying, 4.3.4.1

alias directory, 8.5.2

aliases, certificate, 8.2.4

arguments

certinfo, 8.4.1

changepw subcommand, A.2.2.1

command line utilities, A.1.1

forcepwchg, A.3.1

importcnf, A.1.1

password, A.1.2

prepds, A.2.4

printstat, A.2.5

resetconn, A.2.6

resync, 6.2.3, 6.2.3, A.2.7, A.2.7

stopsync, A.2.12

attribute modification flow, 4.5.2.1

attributes

AvoidPdcOnWan, 4.3.4.1

creating parameterized default values, 2.2.4.2

creation, 2.2.4.1

description, 2.2.4

dspswuserlink, 6.2.2, A.2.4

editing, 4.5.1.3.1

indexing, 6.2.3

inetorgperson, 2.2.4.3

mandatory creation, 2.2.4.1, 4.4.1.1

mapping, 2.2.4.3, 4.4.1

naming, 4.6

nsAccountLock, 4.5.2.2.3, 4.5.2.2.3, 4.5.2.2.3

objectguid, 6.2.2

PwdLastSet, 1.4.4.2

resynchronizing, 6.2.1

selecting, 2.2.3, 4.4.1, 4.4.3.1

significant, 2.2.4.1

synchronizing user entry, 2.5.2, 4.4.1

types, 2.2.4.1

uid, 6.2.3

user, 2.2.4.3

USNchanged, 1.4.2, 1.4.4.2

auditing, enabling on Windows NT, 9.6

audit.log, 2.3.1.5

description, 1.2.2.5, 9.1.1.1

linking and resynchronizing results, A.2.7

location, 9.1.1.1, 9.5.1

purpose, 9.1.1.1

authentication

client, A.3

connecting to configuration directory, A.1.1

failures, 1.4.4.2, 1.4.4.2

on-demand password synchronization, 1.4.4.2

auxiliary objectclasses

configuring, 2.2.3

removing, 4.4.3.1

selecting, 4.4.3.1, 4.4.3.1

AvoidPdcOnWan attribute, 4.3.4.1

B

base DN

description, 4.6

specifying user set domain, 4.6.1

specifying user set domain base DN, 4.6.1

using for multiple SULs, 4.6.1

base64 encoding, 8.6.1.2.1, A.1.1

bidirectional synchronization, 1.1, 1.2.3

broker

accessing, 8.2.5

Message Queue, 1.2.5

specifying ports, 3.3.1

starting, 6.6, 6.6

stopping, 6.6, 6.6

built-in accounts, A.3.1

C

CA certificates

adding, 8.1.3, 8.8

automatic installations, 4.3.4.1

component requirements, 8.3

enabling SSL, 8.6

importing, 8.4.2

retrieving, 8.5.2, 8.6.2.1, 8.7.1

catalogs, global

multiple, 4.3.4

protecting, 8.1.5

purpose, 2.5.2

specifying, 4.3.4.1, 4.3.4.1

central log directories, Preface, 9.1.1.1

central logger

clogger 100 directories, 9.1.1.2

description, 1.2.2.5

local logs, 9.1.1.2

messages, 9.1.1.1

troubleshooting problems, 9.1.1.1

centralized

logs, 9.1.1.1

system auditing, 1.1

certificate database

adding certificates, 8.8

default path, Preface

directories, 8.6.2.1, 8.8.1

required certificates, 8.4

retrieving certificates, 8.5.2

specifying location, A.1.1

certificates

accepting, 8.2.6

Active Directory, 4.3.4.1, 8.6

adding, 8.8

aliases, 8.2.4

CA, 8.1.3, 8.3

certinfo subcommand, A.2.1

Directory Server, 8.5.2

exporting, 8.5.2

getting information, A.2

importing, 8.6.2.1

installing, 8.2.4

requiring, 4.3.4.1, 8.1.3, 8.4

retrieving, 8.5.2, 8.6.1

self-signed, 8.2.4, 8.5

SSL, 4.3.4.1, 8.1.3, 8.2.6

using certinfo subcommand, 2.5.4, A.2

using certutil, 8.6.1

using idsync certinfo, 8.4

validating, 8.2.3, 8.2.3, 8.2.6

viewing information, A.2.1

certinfo subcommand

adding certificates, A.2.1

arguments, 8.4.1, 8.4.1

description, 2.5.4, A.2

displaying certificate information, A.2

examples, A.2.1

syntax, A.2.1

using, 8.4

certutil

default location, 8.5

retrieving certificates, 8.6.1

change detection, 1.2.3, 1.2.4.1, 1.4, 1.4.5, 4.3.2.1

Change Detector subcomponents, 1.2.4.2, 1.3.4, 2.1.4, A.3.1

changepw subcommand

arguments, A.2.2, A.2.2.1

changing passwords, A.2.2

description, 2.5.4, A.2, A.2.2

examples, A.2.2

syntax, A.2.2, A.2.2.1

changing

configuration passwords, A.2

default schema sources, 4.4.3

channel communication, encrypting, 4.3.2.1

checklists, 3.3.1

installation, 2.6, 2.6

clear-text passwords

capturing, 1.4.1

obtaining, 1.4.4

propagating, 1.4.4

using Password Filter DLL, 1.4.4.1

client, authentication, A.3

command line utilities

common arguments, A.1.1

common features, A.1

description, 1.2.2.3, 2.5.4, A

entering passwords, A.1.2

idsync resync, 6.2.1

using, 2.5.4, A

commands

descriptions, 2.5.4

imq start, 6.6, 6.6

isw stop, 6.6, 6.6

communication

enabling SSL, 4.3.2.1, 4.3.2.1, 4.3.2.1

Last Communication, 9.3.1

components

configuration directory, 1.2.2.1

Console, 1.2.2.2

Core, 1.2.2, 2.1.1

descriptions, 1.2

distribution, 1.3, 1.5.2

distribution example, 1.5.2

IDs, 9.1.1.1

local logs, 9.1.1.1, 9.1.1.2

logging levels, 9.1.2

messages, 9.1.1.1

physical deployment example, 1.5.1

configuration directory

administrator name/password, 3.3.1, 5.2.1

connecting to, A.1.1

credentials, 8.2.2

default port, 3.3.1

description, 1.2.2.1

description/explanation, 3.3.1

encrypting configuration information, 3.3.1

hostname/port number, 6.2.3, A.2.7

purpose, 2.5.1, 2.5.3

querying, 4.3.2.1

reading/writing to, 1.2.2.1

restricting access, 8.2.7

specifying credentials, 3.3.1

specifying host/port, 3.3.1

URL, 2.5.1, 3.3.1, 5.2.1

validating certificates, 8.2.6

configuration passwords

changing, A.2, A.2.2

finding, A.2.2.1

protecting, 8.2.1

specifying, 8.1.1

using idsync changepw, A.2.2

Configuration tab, 4.2.1

description, 4.2.1

configurations

deployment decisions, 2.5

configuring

activations/inactivations, 4.5.2.2

attribute synchronization, 4.5

Core, 0, 2.5.2, 2.6, 4

filters, D.2.1

log files, 9.2.1

Message Queue, 3.3.1

multiple domains, D.1

multiple suffixes, E.1

security, 8

SSL, 2.4

suffixes, 4.3.2.1

To Do list, 2.1

validation, 4.7.1

connectors

Active Directory, 5.1

bidirectional synchronization, 1.2.3

description, 1.2.3

detecting changes, 1.4.1, 1.4.2, 1.4.3

Directory Server, 5.3.1

distribution, 5.1

installing, 1.3.2, 1.3.3, 1.3.4, 4.7.1, 5

launching/monitoring, 1.2.1

printing status, A.2, A.2.5

restarting, 1.2.3

states, A.2, A.2.6

troubleshooting, 9.1.1.1

using idsync printstat, A.2

Watchdog process, 1.2.1

Windows NT, 5.3.3

consoles

configuring Core, 4

description, 1.2.2.2, 2.1.1, 4.2.1

Directory Server, 4.5.2.2.2

Identity Synchronization for Windows, 1.2.2.2, 4.2.1, 9.3.1, 9.4.1, 9.5.1

installing, 3.3.1

logging in, 3.3.1

passwords, 3.3.1

reading/writing to configuration directory, 1.2.2.1

starting, 3.3.1, 3.3.1

starting/stopping synchronization, 6.4.1

Sun Java System Console, 4.2

uninstalling, 7.3

viewing logs, 9.1

Core

checklists, 2.6, 2.6

components, 1.2, 2.1.1

configuring, 0, 2.5.2, 2.6, 4

description, 1.2.2

enabling SSL, 5.2.1

installation privileges, 3.3, 3.3

installing, 1.3.1, 2.5.1, 2.6, 3.3

uninstalling, 7.1, 7.2.2, 7.2.2

Watchdog, 1.2.1

creating

accounts, 2.3.1.3, 5.3.1.1, C.1.1

Active Directory Sources, 4.3.1

Active Directory sources, 4.3.4

NT Registry Directory Sources, 4.3.1

parameterized default attribute values, 2.2.4.2

Retro-Changelog database, 4.3.3

SULs, 2.2.5, 2.3, 4.6

Sun Java System Directory Sources, 4.3.1, 4.3.2

Sun Java System directory sources, 4.3.2

Windows 2003 Server directory sources, 2.3

Windows 2003 Server global catalogs, 2.3

Windows NT directory sources, 4.3.5.1

creating indexes, 4.3.3.1

creation attributes

creating, 4.5.1.1

deleting, 4.5.1.1

description, 2.2.4.1

editing, 4.5.1.1

mandatory, 4.4.1, 4.4.1.1

mapping, 4.5.1.2.1

parameterized default values, 2.2.4.2

creation expressions, 2.2.5, 4.6.1

creation flows

enabling, 1.5

planning configuration, 2.5.2

specifying, 4.5.1.1, 4.5.1.3.1, 4.5.1.4.1

credentials/privileges, 3.3.1

configuration directory, 8.2.2

configuration Directory Server, 2.5.3

creating credentials, 8.2.2

Directory Server, 8.1.7

installing Core, 3.3, 3.3

required for connectors, 8.1.7

required for idsync prepds, A.2.4

specifying, 4.3.4.1

specifying for configuration directory, 3.3.1

custom methods, 4.5.2.2.4

D

daemons

starting/stopping, 6.6

writing logs, 9.2.1

databases

certificate, 4.3.2.1, 8.1.3, 8.5.2, 8.6, A.2.1

creating indexes, 4.3.3.1

object cache, 1.4.2

Retro-Changelog, 4.3.3, 4.3.3.1

default locations, Preface

defaults

audit/error message lines to show, 9.5.1

base64-encoded values, A.1.1

broker port, 3.3.1

certutil location, 8.5

command line utility arguments, 6.2.3

configuration directory port, 3.3.1

creating parameterized values, 2.2.4.2, 4.4.2

encrypted with 3DES keys, 8.1.5

installation directory for Solaris, 7.1

instance directory, C.1, C.1

keeping logs, 9.1.1.2

LDAP port, 4.3.2.1

log directory, 9.2.1

password policies, 2.3

Require trusted SSL certificate setting, 4.3.4.1

resync interval, 4.3.3.1

resynchronization source, 6.2.3

root suffixes, 4.3.2.1, A.1.1

SUL name, 4.6.1

synchronization flow, 4.5

syslog messages, 9.2.1

writing logs, 9.2.1

defining

multiple domains, D.1

SULs, D.1

users, 2.2.5

deleting

attribute values, 4.5.1.3.1

objects, 4.5.5.1

deletions

specifying flow, 4.5.5

synchronizing, 4.5.5

deployments

Active Directory, 4.3.4

bootstrapping, 2.1.5

component distribution, 1.3

examples, 1.5.1

installation/configuration decisions, 2.5

MMR, E

running idsync resync, 2.1.5

single-host, 2.1

synchronization requirements, 1.5

two-machine scenario, 1.5

detecting

activations/inactivations, 4.5.2.2.1

changes, 1.2.3, 1.2.4.1, 1.4, 1.4.5, 4.3.2.1

errors, 1.2.2.5

directories

Active Directory, 2.2.1

alias, 8.5.2

central log, 9.1.1.1

certificate database, 8.6.2.1, 8.8.1

clogger 100 (central logger), 9.1.1.2

configuration, 1.2.2.1, 2.5.1, 2.5.1, 2.5.2, 2.5.3, 3.3.1

containing centralized logs, 9.1.1.1

default instance, C.1

description/explanation, 2.2.1

installation, 3.3.1, 5.2.1, 5.2.1

instance, C.1

isw-hostname, 7.1

logs, 9.2.1

pre-populating, A.2.7

querying, 4.3.2.1

resynchronizing sources, 6.2.1

samples1, B

specifying installation, 3.3.1

TEMP, 5.3.1.1

Directory Server

access rights, 4.3.4.1

accessing via SSL, A.1.1

attribute modification flow, 4.5.2.1

change detection, 1.4.1, 1.4.1

connectors, installing, 5.3.1

console, 4.5.2.2.2

credentials/privileges, 8.1.7

installing connectors, 1.3.2, 5.3.1

installing the plugin, 1.3.2

interoperating with Directory Server tools, 4.5.2.2.2

objectclasses, 2.2.3

password policies, 2.3.1.1

preparing, 2.1.3, 4.3.3, 4.3.3, A.2, A.2.4

preparing directory sources, 2.1.3, A.2.4

preparing Identity Synchronization for Windows source, 4.3.3

propagating passwords, 2.4, 2.5.2

setup program, 5.2.1

specifying, 4.3.2.1

synchronizing attributes, 4.4.1

synchronizing passwords, 1.5, 1.5

using custom methods, 4.5.2.2.4

using idsync prepds, A.2

Directory Server Plug-in

adding certificates, A.2.1

bidirectional synchronization, 1.2.4.1

description, 1.2.4.1, 4.3.2.1

detecting changes, 1.4.1

enabling secure communication, 4.3.2.1, 8.8

encrypting passwords, 8.1.4

installing, 1.3.2, 1.3.2, 4.3.2.1, 5

logs, 9.1.1.4

removing, 7.1

uninstalling, 7.1

using SSL, 4.3.2.1, 8.8

directory sources

Active Directory, 5.3.1

adding, 4.3.1, 4.3.3.1, 4.3.5.1

creating, 2.3

example entries, 5.3.1

linking users, 6.2.2

states, 9.3.1

distinguished names

administrator, 4.3.4.1

specifying, 4.3.4.1, 4.3.4.1, 4.3.4.1, 4.3.4.1

distributing system components, 1.3

DLLs

NT Change Detector, 9.1.1.3

Password Filter, 1.4.4.1

Windows NT, 1.3.4

DNS

domain entries, 4.3.2.1

DNs, 4.3.4.1

domain controllers

Active Directory, 4.3.4.1, 4.3.4.1

editing, 4.3.4.1, 4.3.5.1

editing parameters, 4.3.4.1

failover, 4.3.4.1

specifying, 4.3.4.1

using multiple, 4.3.4.1

domains

Active Directory, 4.3.4, 4.3.4.1, D.1, D.2

configuring multiple, D.1

multiple, D.2

resolving overlap, 4.6.1

specifying for NT, 4.3.5.1

user set, 4.6.1

downloading

installation program, 3.2

dspswuserlink attribute, 6.2.2, A.2.4

E

editing

domain controller configuration parameters, 4.3.4.1

domain controllers, 4.3.4.1, 4.3.5.1

mapped attributes, 4.5.1.3.1

enabling

SSL communication, 3.3.1, 4.3.2.1, 4.3.2.1, 4.3.2.1, 4.3.2.1, 5.2.1, 8.5

encrypting

3DES keys, 8.1.4

channel communication, 4.3.2.1

clear-text passwords, 1.4.1

configuration information, 3.3.1, 3.3.1

Message Queue messages, 8.1.4, 8.1.6

network traffic, 8.1.3

enforcing password policies, 2.3.1

equality

filters, 4.6.1

indexes, 4.3.3, A.2.4

error detection, 1.2.2.5

error.log

description, 9.1.1.1

location, 9.1.1.1, 9.5.1

mapping connector IDs to directory source, 8.6.2.1, 8.8.1

errors

validation, 4.7.1

examples

audit log path, 9.5.1

central log, 9.1.1.1

directory source entries, 5.3.1

forcepwchg command, A.3.1

idsync certinfo command, A.2.1

idsync changepw command, A.2.2.1

idsync importcnf command, A.2.3

idsync prepds command, A.2.4

idsync printstat command, A.2.5

idsync resetconn command, A.2.6

idsync resync command, A.2.7

idsync startsync command, A.2.11

idsync stopsync command, A.2.12

log messages, 9.1.2

prepds subcommand, A.2.4

resync arguments, 6.2.3

user set domain base DN, 4.6.1

executable

setup.exe, 5.2.1

exporting

Directory Server certificates, 8.5.2

F

failover controllers, specifying, 4.3.4.1

failures

hardware, A.2

uninstallater, A.2

features, 1.1

filtering

synchronization user lists, 4.6.1

user lists, 4.6.1, D.1

filters

configuring, D.2.1

description, 4.6

equality, 4.6.1

LDAP, 2.2.5, 2.6, A.1.1, A.2.7

presence, 4.6.1

search, 8.6.1.2.1

substring, 4.6.1

SUL, 2.2.5, 2.5.2, 4.6

syntax, 4.6.1, D.1

flow

defaults, 4.5

specifying deletions, 4.5.5

specifying modification, 4.5.2

forcepwchg utility

arguments, A.3.1

description, A.3

forcing password changes, A.3

forcepwchg.jar, A.3.1

FSMO, 4.3.4.1

G

global catalogs, 2.5.2

Active Directory, 4.3.4

creating, 2.3

multiple, 4.3.4

protecting, 8.1.5

specifying, 4.3.4.1, 4.3.4.1, 4.3.4.1

global synchronization settings, 1.5

Group Synchronization, 4.5.3, A.2.8

H

hardening security, 8.2

hardware failures, A.2

hashed passwords, 1.4.1

help

usage information, A.1.3

high availability description, 1.4.5

hostnames

configuration directory, 6.2.3, A.2.7

server group, 4.2.1

hosts

Active Directory, 4.3.4.1, 4.3.4.1

specifying, 4.3.4.1

I

Identity Synchronization for Windows

Console, 9.3.1, 9.4.1, 9.5.1

installation, 2

preparing Directory Server directory sources, 2.1.3, A.2.4

preparing Directory Server source, 4.3.3

reliability, 1.4.5

removing, 0, 7

setup program, 0, 3

uninstalling, 7

idsync certinfo, 8.4

adding certificates, A.2.1

arguments, A.2.1

description, A.2.1

examples, A.2.1, A.2.1

syntax, A.2.1

idsync changepw

arguments, A.2.1

changing passwords, A.2.2

description, A.2.2

examples, A.2.2

syntax, A.2.1

idsync groupsync

Arguments, Description, Syntax, A.2.8

idsync importcnf

arguments, A.1.1, A.2.3

description, A.2, A.2.3

importing configuration files, A.2.3

syntax, A.2.3

idsync prepds

credentials, A.2.4

description, 2.5.4, A.2

preparing Directory Server, 2.1.3, A.2

syntax, A.2.4

idsync printstat

arguments, A.2.5

description, A.2.5

listing install/configuration steps, A.2.5

printing status, A.2.5

syntax, A.2.5

idsync resetconn

arguments, A.2.6

description, A.2.6

syntax, A.2.6

idsync resync, 2.1.5

argument examples, 6.2.3

arguments, A.2.7

caveats for using, 6.2.3

description, A.2.7

example usages, 6.2.3

indexes, 6.2.3

logging results, 6.3

resynchronizing two directory sources, 6.2.1

sample linkusers XML configuration documents, B

scripts, 6.2.2

synchronizing existing users, A.2.7

syntax, A.2.7

using, 6.2.1

idsync script, executing, A.2

idsync startsync

arguments, A.2.11

description, A.2.11

syntax, A.2.11

idsync stopsync

arguments, A.2.12

description, A.2.12

syntax, A.2.12

importcnf subcommand

arguments, A.1.1, A.2.3

description, A.2, A.2.3

importing

CA certificates, 8.4.2

configuration information, A.2.3

imq start commands, 6.6, 6.6

imq stop commands, 6.6, 6.6

inactivations, 4.5.2

indexes

adding, A.2.4, A.2.4.1

creating, 4.3.3.1

creating equality, 4.3.3

indexing attributes, 6.2.3

inetorgperson attribute, 2.2.4.3

information panel, 2.1, 2.1, 3.3.1, 4.2.1, 5.3.1.1, 5.3.2.1, 9.4.1

installation

checklists, 2.6, 2.6

decisions, 2.5

directories, 5.2.1, 5.2.1

directories, default, 7.1

downloading program, 3.2

specifying directories, 3.3.1, 3.3.1

To Do list, 2.1, 3.3.1

viewing logs, 5.3.1.1, 5.3.2.1, 5.3.3.1

installing

Active Directory connectors, 1.3.3, 5.3.2

certificates, 8.2.4

connectors, 4.7.1, 5

Core, 1.3.1, 2.5.1, 3.3

Directory Server connectors, 1.3.2

Directory Server Plugin, 1.3.2, 5

Identity Synchronization for Windows, 3.3.1

subcomponents, 4.7.1

Windows NT connectors and subcomponents, 1.3.4

install-path, Preface

instance directory, default, C.1

instance-path, Preface

interoperating

with Directory Server Tools, 4.5.2.2.2

isw- hostname directory, Preface

isw start command, 6.6, 6.6

isw stop commands, 6.6, 6.6

isw-hostname directory, 7.1

J

jar files

forcepwchg, A.3.1

Java Development Kits, downloading, 3.1

Java Home, specifying, 3.3.1

Java Naming and Directory Interface, Preface

java processes

central logger, 1.2.2.5

command line utilities, 1.2.2.3

configuration directory, 1.2.2.1

connectors, 1.2.3

Console, 1.2.2.2

restarting, 1.2.1

system manager, 1.2.2.4

Watchdog, 1.2.1

JRE

downloading, 3.1

verifying Java Home directory, 3.3.1

K

keytool utility, 8.2.4

L

launching connectors, 1.2.1

LDAP

default port, 4.3.2.1

DIT, 2.5.2

filters, 2.2.5, 2.6, A.1.1, A.2.7

ldapsearch, A.3

query syntax, 4.6.1

ldapsearch, using, A.3

lightweight processes, 1.2.4

linking users

using idsync resync, A.2

using XML configuration documents, A.2.7

LinkUsers XML Document, B

linkusers.cfg, B, B.2

linkusers-simple.cfg, B.1

local log directory, Preface

local logs, 9.1.1.2

central logger, 9.1.1.2

component, 9.1.1.1, 9.1.1.2

locating PDC computer names, 4.3.5.1

logging

audit/error files, 9

central logs, 9.1.1.1

checking resync.log, 6.3

day-to-day operations, 9.1

errors, 9.1

log types, 9.1.1

properly linked users, 6.3

specifying default log directories/files, 9.2.1

specifying logging levels, 9.1.2

viewing logs, 5.3.1.1, 5.3.2.1, 5.3.3.1

logging in, 3.3.1

logs

audit, 1.2.2.5, 9.1.1.1

audit.log, 9.1.1.1

Directory Server Plug-in, 9.1.1.4

error, 1.2.2.5, 9.1.1.1, 9.5.1

format, 9.1.2

local, 9.1.1.2

local component logs, 9.1.1.2

local subcomponent logs, 9.1.1.3

location, 9.5.1

locations, 9.1.1.1

reading, 9.1.2

resync, 9.1.1.1

resync.log, 6.3

viewing, 5.3.1.1, 5.3.2.1, 5.3.3.1, 9.1

logs directory, 9.1.1.1, 9.2.1

M

mandatory creation attributes, 2.2.4.1, 4.4.1, 4.4.1.1

mapping

attributes, 2.2.4.3, 4.4.1, 4.5.1.3.1

connector IDs to directory source, 8.6.2.1

creation attributes, 4.5.1.2.1

Message Queue, Preface

accepting certificates, 8.2.6

access controls, 8.1.6

broker, 1.2.5

configuring, 3.3.1

default broker port, 3.3.1

description, 1.2.5, 1.2.5

self-signed certificates, 8.2.4

specifying localhost name, 3.3.1

specifying port numbers, 3.3.1

validating certificates, 8.2.3

validating client certificates, 8.2.3

messages

audit.log, 9.1.1.1, 9.1.1.2

debug.log, 9.1.1.1

error.log, 9.1.1.1, 9.1.1.2

for components, 9.1.1.1

provided in central logger, 9.1.1.1

resync.log, 9.1.1.1

synchronization event, 9.1.1.2

Microsoft

certificate server, 4.3.4.1

Knowledge Base Articles, 4.3.4.1

migration

using forcepwchg, A.3

MMR

configuration components, 8.3

configuring, E

reliable synchronization, 1.4.5

modifications, specifying flow, 4.5.2

monitoring connectors, 1.2.1

Multimaster Replication. See MMR, E

multiple domain controllers, 4.3.4.1

multiple domains, D.1

N

naming attributes

description, 4.6

nsAccountLock attribute, 4.5.2.2.3, 4.5.2.2.3, 4.5.2.2.3

NT Change Detector DLLs, 9.1.1.3

NT Registry Directory Source, 4.3.1

NT SAM

domain users, 6.2.1

identifiers for linking, 6.2.2

registries, 1.2.4.2

synchronizing, 1.3.4

O

object cache

databases, 1.4.2

objectclasses

Active Directory, 2.2.3

attributes, 2.2.3, 4.4.3.1

auxiliary, 2.2.3

configuring, 2.2.3, 2.2.3

Directory Server, 2.2.3

selecting, 4.4.3.1

structural, 2.2.3

User, 2.5.2

objectguid attribute, 6.2.2

objects

configuring activations/inactivations, 4.5.2.2

deleting, 4.5.5.1

specifying deletion flow, 4.5.5

specifying modification flow, 4.5.2

on-demand password synchronization, 1.4.1, 1.4.4.2, 1.4.4.2, 1.4.5, 6.2.1

authentication mechanisms, 1.4.4.2

P

Password Filter subcomponents, 1.2.4.2, 1.3.4, 1.4.4.1, 2.1.4, A.3.1

password policies

Active Directory, 2.3.1.2

default Windows, 2.3

Directory Server, 2.3.1.1

enforcing, 2.3.1

for configuration passwords, 8.2.1

password synchronization, on demand, 6.2.1

password synchronization, on-demand, 1.4.1, 1.4.4.2

passwords

arguments, A.1.2

changing configuration, A.2.2

configuration, 8.1.1

creating, 4.5.1.1, 4.5.1.3.1, 4.5.1.4.1

creating accounts without, 2.3.1.3

encrypting, 1.4.1

entering for command line utilities, A.1.2

finding, A.2.2.1

hashed, 1.4.1

on-demand password synchronization, 1.4.4.2, 1.4.5, 6.2.1

propagating changes, 1.4.4, 2.4

protecting, 8.2.1, 8.2.1

requiring changes, A.3

synchronizing, 2.3

PDC

FSMO role owner, 4.3.4.1

installing connectors and subcomponents, 1.3.4

locating computer names, 4.3.5.1

persistent storage protection, 8.1.8

port numbers

configuration directory, 6.2.3, A.2.7

defaults, 3.3.1

specifying Message Queue, 3.3.1, 3.3.1

prefixes, 4.3.2.1

preparing

Directory Server, 2.1.3, 4.3.3, A.2.4

prepds subcommand

arguments, A.2.4

credentials, A.2.4

description, 2.5.4, A.2

examples, A.2.4

preparing Directory Server, 2.1.3

preparing Directory Servers, A.2

syntax, A.2.4

pre-populating directories, A.2.7

presence

filters, 4.6.1

indexes, A.2.4

Primary Domain Controller.. See PDC

printing connector status, A.2.5

printstat subcommand

arguments, A.2.5

description, A.2.5

displaying installation/configuration steps, A.2

printing connector status, 2.5.4, A.2

syntax, A.2.5

privileges/credentials, 2.5.1, 3.3.1

configuration directory, 8.2.2

configuration Directory Server, 2.5.3

creating credentials, 8.2.2

installing Core, 3.3, 3.3

required for connectors, 8.1.7

required for idsync prepds, A.2.4

processes

central logger, 1.2.2.5

command line utilities, 1.2.2.3

configuration directory, 1.2.2.1

connectors, 1.2.3

Console, 1.2.2.2

lightweight, 1.2.4

system manager, 1.2.2.4

Watchdog, 1.2.1

programs

setup, 5.2.1

propagating

new passwords, 4.5.1.1

password changes, 1.4.4, 2.4, 4.5.2.1

user deletions, 4.5.5

protecting

global catalogs, 8.1.5

passwords, 8.2.1

sensitive information, 8.1.5

protecting sensitive information, 8.1.8

PwdLastSet attribute, 1.4.4.2

Q

querying

configuration directory, 4.3.2.1, 4.3.2.1

R

reading logs, 9.1.2

Red Hat

running the installation program, 3.2.4

reliability, 1.4.5

removing

attribute values, 4.5.1.3.1

auxiliary objectclasses, 4.4.3.1

Core, 7.2.2

Directory Server Plug-in, 7.1

replication

configuring, 8.3, E.1

single suffix, E

synchronizing users, E

requirements

synchronization, 1.5

requiring password changes, A.3

resetconn subcommand, A.2.6

arguments, A.2.6

description, A.2.6

resetting connector states, 2.5.4, A.2

syntax, A.2.6

resetting

connector states, A.2, A.2.6

resolving domain overlap, 4.6.1

resources

finding, 4.2

restarting

connectors, 1.2.3

java processes, 1.2.1

services, C.1.1

synchronization, 6.4

restricting access, 8.2.7

resync interval

default, 4.3.3.1

setting for Active Directory connectors, 4.3.4.1

setting for Directory Server connectors, 4.3.3.1

setting for NT, 4.3.5.1

resync subcommand, 6.2.3, 6.2.3, A.2.7, A.2.7, B

arguments, A.2.7

bootstrapping deployments, 2.1.5

description, A.2.7

linking and synchronizing users, 6.2.1

linking/synchronizing users, 2.5.4, A.2

synchronizing existing users, A.2.7

syntax, A.2.7

resynchronizing

attributes, 6.2.1

directory sources, 6.2.1

users, A.2, A.2.7

resync.log

description, 9.1.1.1

linking and resynchronizing results, 6.3, A.2.7

location, 9.1.1.1

retrieving certificates

using certutil, 8.6.1

Retro-Changelog database

change detection, 1.4.1

creating, 4.3.3

recreating, 4.3.3.1

role owners, Primary Domain Controller FSMO, 4.3.4.1

root suffixes

default, 4.3.2.1

description, 2.5.1

directory source labels, 2.1.4

specifying, 3.3.1

running

idsync resync scripts, 6.2.2

out of disk space, 9.2.1

S

safe mode, 6.2.2

samples

linkusers.cfg, B.2

linkusers-simple.cfg, B.1

XML configuration documents, B

samples1 directory, B

SASL Digest-MD5, 1.4.4.2

schema

changing default sources, 4.4.3

controller, 2.5.2

scripts

idsync, A.2

idsync resync, 6.2.2

secure communication, 4.3.2.1

Secure Sockets Layer (SSL), 8

security

Active Directory, 4.3.4.1

configuring, 8

hardening, 8.2

replicated configurations, 8.3

self-signed certificates, 8.2.4, 8.5

serverroot directory, Preface

servers

Administration, 1.3.1, 3.3, 3.3.1, 3.3.1

failovers, 4.3.4.1

finding, 4.2

hostnames, 4.2.1

services

restarting, C.1.1

starting/stopping, 4.2.1, 6.4.1, 6.6

synchronization, 6.4.1

setup programs

Directory Server, 5.2.1

Identity Synchronization for Windows, 0, 3

locating, 5.2.1

setup.exe, 5.2.1

significant attributes

creating parameterized default values, 2.2.4.2

description, 2.2.4.1

single-host deployments, 2.1

SLAMD Distributed Load Generation Engine, Preface

Solaris

removing Identity Synchronization for Windows, 7.3.1

running the installation program, 3.2.1, 3.2.2

starting/stopping daemons, 6.6, 6.6

sources

creating Active Directory, 4.3.4

specifying

Active Directory domains, 4.3.4.1

attributes, 2.2.3, 4.4.3.1

configuration directory credentials, 3.3.1

configuration directory host/port, 3.3.1

configuration passwords, 8.1.1

creation flows, 4.5.1.1, 4.5.1.3.1, 4.5.1.4.1

credentials, 4.3.4.1

Directory Server, 4.3.2.1

domain controllers, 4.3.4.1

failover controllers, 4.3.4.1

failover servers, 4.3.4.1

global catalogs, 4.3.4.1, 4.3.4.1, 4.3.4.1

hosts, 4.3.4.1

installation directories, 3.3.1

Java Home, 3.3.1

object deletion flow, 4.5.5

object modification flow, 4.5.2

port numbers, 3.3.1

resync interval, 4.3.4.1

root suffixes, 3.3.1

user DN, 4.3.2.1, 4.3.4.1

user DNs, 4.3.4.1

user set domain base DN, 4.6.1

Windows NT domain names, 4.3.5.1

SSL

accessing Directory Server, A.1.1

certificates, 4.3.4.1, 8.1.3, 8.2.6

configuring Active Directory, 2.4, 4.3.4.1, 4.3.4.1

configuring for Windows, 2.4

enabling, 8.5

enabling communication, 4.3.2.1, 4.3.2.1, 8.5

enabling for Core, 5.2.1

requiring trusted certificates, 4.3.4.1

selecting ports, 5.2.1

using, 4.3.2.1, 8.1.2, 8.8

using on Active Directory, 8.1.2, 8.1.5

starting

consoles, 3.3.1, 3.3.1

daemons, 6.6

Message Queue broker, 6.6, 6.6

services, 4.2.1, 6.6

synchronization, 2.5.4, 6.4, A.2.11

startsync subcommand

arguments, A.2.11

description, A.2.11

starting synchronization, 2.5.4, A.2

syntax, A.2.11

states

directory source, 9.3.1

status

Configuration Validity Status, 4.7.1

connector, A.2.5

printing connector status, A.2.5

viewing, 9.1

Status tab, 4.2.1

STDIN, reading passwords, A.1.2

stopping

daemons, 6.6

Message Queue broker, 6.6, 6.6

services, 4.2.1, 6.6

synchronization, 2.5.4, 6.4, A.2.12

stopsync subcommand

arguments, A.2.12, A.2.12

stopping synchronization, A.2

syntax, A.2.12

storing

configuration information, 2.5.2, 5.2.1

SULs, 4.6.1, 4.7.1

structural objectclasses

configuring, 2.2.3

defaults, 2.2.3

subcommands

certinfo, 8.4.1, A.2.1

descriptions, A.2

idsync, A

importcnf, A.1.1, A.2, A.2.3

printstat, A.2.5

resetconn, A.2.6, A.2.6

resync, A.2.7, A.2.7, B

startsync, A.2.11

stopsync, A.2.12

using changepw, A.2.2

using importcnf, A.2.3

subcomponents

description, 1.2.4

installing, 4.7.1

substring filters, 4.6.1

suffix/database, 2.1.4, 2.2.1

suffixes

configuring, 4.3.2.1, 4.3.2.1

replicating, E

SULs

creating, 2.2.5, 2.3, 4.6

defining, D.1

definition components, 4.6, D.1

definitions, 2.2.5

description, 2.2.5, 4.6

filtering administrators, 4.6.1

storing, 4.6.1

Sun Java™, 0

Sun Java System

Console, 4.2, 4.2

creating directory sources, 4.3.1, 4.3.2, 4.3.2

synchronization

bidirectional, 1.2.3

configuring, 4.5

defaults, 4.5

event messages, 9.1.1.2

filtering user lists, 4.6.1

multiple domains, 4.6.1

requirements, 1.5

restarting, 6.4

settings, 1.5, 2.2.2, 2.2.2

starting, A.2.11

starting/stopping, 6.4, 6.4.1, 6.4.1, A.2

stopping, A.2.12

using idsync startsync, A.2

using idsync stopsync, A.2

when components become unavailable, 1.4.5

Synchronization User Lists. See SULs, 4.6

synchronizing

activations/inactivations, 4.5.2.2, 4.5.2.2.1

attributes, 4.3.2.1, 4.4.1

deletions, 4.5.5

existing users, 2.1.5

NT SAM, 1.3.4

passwords, 1.5, 1.5, 2.3, 2.3, 4.3.2.1

user creations, 1.5

user entry attributes, 2.5.2, 4.4.1

using idsync resync, A.2

with Active Directory, 2.3

syntax

changepw subcommand, A.2.2.1

forcepwchg command, A.3.1

idsync, A.2, A.2, A.2

idsync certinfo command, A.2.1

idsync changepw command, A.2.2.1

idsync importcnf, A.2.3

idsync prepds command, A.2.4

idsync printstat command, A.2.5

idsync resetconn command, A.2.6

idsync resync command, A.2.7

idsync startsync command, A.2.11

idsync stopsync command, A.2.12

LDAP filter, 2.2.5

LDAP query, 4.6.1

system

auditing, 1.1

password creation flow, 4.5.1.1, 4.5.1.3.1, 4.5.1.4.1

system components

descriptions, 1.2

distribution, 1.3

System Identity Synchronization for Windows. See Identity Synchronization for Windows, 0

system manager

accepting certificates, 8.2.6

description, 1.2.2.4

SystemManagerBootParams.cfg file, A.2.2.1

T

tabs

Configuration, 4.2.1, 4.2.1

Status, 4.2.1

Tasks, 4.2.1

Tasks tab, 4.2.1

TEMP directory, 5.3.1.1

To Do list, 2.1, 3.3.1, 4.7.1, 5.3.1.1, 5.3.2.1

To Do node, 9.1, 9.4.1

troubleshooting

central logger, 9.1.1.1

trusted certificates, 4.3.4.1, 8.1.3

U

uid attribute, 6.2.3

uninstallation failures, A.2

uninstall.cmd scripts, 7.1

uninstalling

consoles, 7.3

Core, 7.1, 7.2.2, 7.2.2

Directory Server Plugin, 7.1

Identity Synchronization for Windows, 7

software, 7

UNIX commands

verifying Java Home, 3.3.1, 3.3.1

updates, detecting, 1.4

URLs

Administration Server, 3.3.1

configuration directory, 3.3.1, 5.2.1

usage information, idsync, A.1.3

user

attributes, 2.2.4.3

authentication failures, 1.4.4.2

deletions, 4.5.5

distinguished names, 4.3.4.1

domain base DN, specifying, 4.6.1

user DNs

example, 4.3.2.1, 4.3.4.1

specifying, 4.3.2.1, 4.3.4.1, 4.3.4.1

User objectclass, 2.5.2

users

adding to Active Directory, 2.3.1.2

creating SULs, 2.2.5

defining, 2.2.5

filtering, 4.6.1, D.1

linking/synchronizing, 1.5, 2.1.5, 2.5.2, 2.6, 4.4.1, A.2

NT SAM domain, 6.2.1

resynchronizing, A.2.7

special on Active Directory, 6.3

subtrees, 1.5

using

custom methods for Directory Server, 4.5.2.2.4

SSL, 8.1.2, 8.5, 8.8

USNchanged attribute, 1.4.2, 1.4.4.2

UTF-8, A.2, A.3

utilities

command line, 1.2.2.3

forcepwchg, A.3

keytool, 8.2.4

V

validating

certificates, 8.2.3, 8.2.6

configurations, 4.7.1

validation errors, 4.7.1

W

warnings, configuration, 4.7.1

Watchdog process, 1.2.1

WatchList.properties, 8.2.3.1

websites

Directory Server publications, 2.3.1.5

download Java Development Kit, 3.1

Microsoft certificate authority, 2.4

Microsoft product documentation, 2.3.1.5, 2.4

Sun product documentation, 0

Windows

configuring SSL, 2.4

creating directory sources, 4.3.4

removing Identity Synchronization for Windows, 7.3.1

running the installation program, 3.2.3

selecting Directory Source, 4.6.1

starting/stopping services, 4.2.1

Windows NT

change detection, 1.4.3

connector description, 1.2.3

creating directory sources, 4.3.5.1

enabling auditing, 9.6

installing connectors, 5.3.3

installing connectors and subcomponents, 1.3.4

Registry, 1.5

specifying domain name, 4.3.5.1

synchronization settings, 2.2.2

writing

logs to files, 9.2.1

logs to syslog daemon, 9.2.1

X

XML configuration documents

importing exported 1.0 configurations, 3.3.1

linking users, 2.6, A.2.7

linkusers.cfg, B.2

linkusers-simple.cfg, B.1

samples, B, B