Synchronizing from a Connected Directory to Oracle Internet Directory

Configuring Directory Synchronization 6-3 the ’Replicating Directory Changes’ Permission for the Microsoft Metadirectory Services ADAM Service Account available at http:support.microsoft.com . Some of the most important pieces of a directory synchronization profile include the connection details you assign to the properties listed in Table 6–1 :

6.4 Configuring Mapping Rules

This section discusses how to configure mapping rules. It contains these topics: ■ Distinguished Name Mapping ■ Attribute-Level Mapping ■ Manually Creating New Mapping Files ■ Supported Attribute Mapping Rules and Examples ■ Example: Mapping File for a Tagged-File Interface ■ Example: Mapping Files for an LDIF Interface ■ Updating Mapping Rules You use the mapping rules attribute to specify how to convert entries from the source to the destination. Oracle Internet Directory must either be the source or the destination. When converting the entries, there are three types of mapping rules: domain rules, attribute rules, and reconciliation rules. These mapping rules allow you to specify distinguished name mapping, attribute-level mapping, and reconciliation rules. Note that reconciliation rules are only used with Novell eDirectory and OpenLDAP. For more information on using reconciliation rules, see Chapter 22, Integrating with Novell eDirectory or OpenLDAP . Mapping rules are organized in a fixed, tabular format, and you must follow that format carefully. Each set of mapping rules appears between a line containing only the word DomainRules or AttributeRules and a line containing only three number signs . DomainRules Table 6–1 Connection Detail Properties Property Description odip.profile.condirurl The URL of the connected directory: ■ To connect to an LDAP directory, use the form host:port ■ To connect in SSL mode, use the form host:port:1. ■ To connect to a database, use the form host:port:sid odip.profile.condiraccount The DN or account name used to connect to the third-party directory Notes: ■ The account information you specify must have sufficient privileges in the directory to which you are connecting. ■ The account name is not required if you are using the LDIF or tagged data formats. ■ You will be prompted for a password.