Red Hat DIRECTORY SERVER 7.1 - DEPLOYMENT Deployment Manual

Also see for DIRECTORY SERVER 7.1: Manual Installation guide Configuration Reference Administrator's guide

Contents

Red Hat DIRECTORY SERVER 7.1 - DEPLOYMENT Deployment Manual Manual pdf 139 page image

139Chapter 7Designing SynchronizationAn important factor to consider as you conduct the site survey for your existingsite (“Performing a Site Survey,” on page 30) is to include the structure and datatypes of Active Directory or Windows NT4 directory services. Through WindowsSync, you can synchronize an existing Windows directory service with yourDirectory Server, including creating, modifying, and deleting Windows accountson the Directory Server or, oppositely, the Directory Server accounts on Windows.This provides an efficient and effective way to maintain directory informationintegrity across directory services.This chapter covers how Windows Sync works and how to design yoursynchronization process in the following sections:• Windows Sync Overview (page 139)• Designing Windows Sync (page 144)Windows Sync OverviewThe synchronization process is analogous to the replication process: the syncprocess is enabled by a plug-in and configured and initiated through a syncagreement, and a record of directory changes is mainatined and updates are sentaccording to that log.There are three parts to the complete Windows Sync process:• User Sync. The Directory Server leverages the Multi-Master ReplicationPlug-in to synchronize user and group entries. The same changelog that is usedfor multi-master replication is also used to send updates from the DirectoryServer to the Windows sync peer server as an LDAP operation. The server alsoperforms LDAP search operations against its Windows server to synchronizechanges made to Windows entries to the corresponding Directory Server entry.