Active Directory 389 Directory Server Sync

Active Directory 389 Directory Server Sync

389 Directory Server is amazing, it allow you to connect to active directory, and sync users, passwords, etc. This is extremely useful, as most shops use both UNIX/Linux as well as windows. Let's get started with the basics

domain.local = LDAP Domain, and AD Domain. These can be different internal domains, and it will still work.

Launch the 389 Console

Double click on Directory Server

Browse to Directory –> Config

create a new user (keep in mind that we use the user "replication" for LDAP replication, so we need to pick something else, like "adreplication"

note in the bottom corner, it gives you the full LDAP syntax

we needc to setup changelogging (if not already for LDAP multi-master)

for userRoot, enable multi-master, or Dedicated Consumer, depending on your configuration

create a new OU in LDAP

In your Active Directory Domain, create an OU in the root called "LDAP"

now we need to create a Windows Sync Agreement.

Right-Click User-Root and select "New Windows Sync Agreement"

configure the connector according to your Windows Domain

 

configure the sync connector as follows:

** Note, you do not need to bind as administrator, but it's a good starting point to make sure your config works **

click done

Right-click on the AD connector, and initialize, hit yes (make sure you have a full backup first)

if all is configured properly, you should have a successfull initialization

 

create a new user, fill out standard account fields

now go to the "NT User" column

Save/Quit, now open Active Directory Users and Computers, and browse to the LDAP OU

 

now delete the account from Active Directory

wait a few minutes, or if you want instant results, you can force a sync from Configuration –> AD1

Right click and select "Send And Receive Updates Now"

now take a look at your LDAP ActiveDirectory OU, and you will see it's empty once again.

 

That's it! You Have successfully configured two-way MultiMaster, MultiPlatform LDAP Sync!

 

Hosted Linux Servers at www.zwiegnet.com/go