The LDAPSync service allows you to synchronize groups, subgroups, computers and users from the ADS (Microsoft) directory services with the Matrix42 location database.
The communication between Empirum and the directory service ADS (Microsoft) takes place via LDAP (Port 389) or via LDAPS (Port 636).
As soon as one directory service has been selected, the other one is not available anymore!
Synchronization is always done from the directory service (master) to the Matrix42 location, never the other way round!
From a starting point in the directory service/Matrix42 configuration group, all subordinate organizations, organization units, computers and users will be synchronized. It is only possible to synchronize parallel branches, no superior or inferior branches!
The selected objects are displayed in the middle window under Configuration Groups in the
- Directory service: Select the directory service that serves as starting point of the synchronization process.
-
Sync options: Select how the synchronization directory service => Matrix42 location database shall be done.
- Only new objects: In the middle window of the no existing objects are deleted, beginning with the selected configuration group. With the Empirum LDAPSync service it is only possible to add new objects.
- Smart Sync: In the middle window of the no existing objects without GUID are deleted, beginning with the selected configuration group. New objects are created, objects with GUID are deleted.
- 1:1: In the middle window of the all objects are deleted or added, beginning with the selected configuration group.
Computer templates are objects that are generally ignored during synchronization.
- Only new objects: In the middle window of the no existing objects are deleted, beginning with the selected configuration group. With the Empirum LDAPSync service it is only possible to add new objects.
-
Object filter: With this filter, you may determine, what shall be synchronized from the directory services.
- Computer: Only computers will be synchronized.
- User: Only users will be synchronized.
-
LDAP server: Displays the server, from which synchronization is done from the selected starting point.
-
.png)
Opens a dialog to add a LDAP server. -
Opens a dialog to modify the selected LDAP server. -
.png)
Deletes the selected LDAP server.
-
- Installation registration: Allows the user to specify registration information that must be entered in the Installation Registration tab.
- Service registration: Allows the user to specify a service user accout, which must be entered in the Service Registration tab. With this account, the service is started.
Additional documentation: