JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle Identity Synchronization for Windows 6.0 Installation and Configuration Guide
search filter icon
search icon

Document Information

Preface

Part I Installing Identity Synchronization for Windows

1.  Understanding the Product

2.  Preparing for Installation

Installation Overview

Installing Core

Configuring the Product

Preparing the Directory Server

Installing Connectors and Configuring Directory Server Plug-In

Synchronizing Existing Users

Configuration Overview

Directories

Synchronization Settings

Object Classes

Attributes and Attribute Mapping

Attribute Types

Parameterized Attribute Default Values

Mapping Attributes

Synchronization User Lists

Synchronizing Passwords With Active Directory

Enforcing Password Policies

Directory Server Password Policies

Active Directory Password Policies

Creating Accounts Without Passwords

Example Password Policies

Error Messages

Configuring Windows for SSL Operation

Installation and Configuration Decisions

Core Installation

Core Configuration

Connector Installation and Configuring the Directory Server Plug-In

Using the Command-Line Utilities

Installation Checklists

3.  Installing Core

4.  Configuring Core Resources

5.  Installing Connectors

6.  Synchronizing Existing Users and User Groups

7.  Removing the Software

8.  Configuring Security

9.  Understanding Audit and Error Files

Part II Identity Synchronization for Windows Appendixes

A.  Using the Identity Synchronization for Windows Command Line Utilities

B.  Identity Synchronization for Windows LinkUsers XML Document Sample

C.  Running Identity Synchronization for Windows Services as Non-Root on Solaris

D.  Defining and Configuring Synchronization User Lists for Identity Synchronization for Windows

E.  Identity Synchronization for Windows Installation Notes for Replicated Environments

Index

Configuring Windows for SSL Operation

If you are planning to propagate password changes from Directory Server to Windows Active Directory, you must configure each Active Directory to use SSL and install the high-encryption pack.

The Identity Synchronization for Windows Active Directory Connector installer can automatically setup SSL in the Active Directory Connector if you enable LDAP over SSL in Active Directory. You can automatically obtain a certificate from a Microsoft Certificate Services Enterprise Root certificate authority as described in

http://support.microsoft.com/default.aspx?scid=kb;en-us;q247078

However, LDAP over SSL can more easily be configured, as described in the technical note at http://support.microsoft.com/default.aspx?scid=kb;en-us;321051

In this case, if you decided to require trusted certificates for SSL communication, you must manually install the certificate in the Connector’s certificate database as described in Enabling SSL in the Active Directory Connector.