Brain²

Domino Directory Integrator

(Ref.: B2LDAP-DOMINOSYNC)

Introduction

The LDAP-Domino synchronization tool allows the synchronization between any LDAP Directory (AD, OpenLDAP, ...) and a Lotus Domino Directory (DD). This tool will help companies with many kinds of directories containing different pieces of information -like telephone number, address, ... - to be synchronized meaning in turn that these directories are better kept up-to-date. The configuration can be called simple; it is done using simple forms containing the source and target criteria and fields that need to be sync'ed.

Architecture

The Brain2 Domino Directory Integrator is packaged into a single Lotus Notes application. The synchronization tasks are performed by a set of Java agents running on a Lotus Domino Server holding replicas of the Domino Directories that will be used for synchronization.

The Brain2 Domino Directory Integrator can synchronize between Domino Directories and any kind of directory with an LDAP compliant interface (Microsoft's Active Directory, OpenLDAP, ...).

The synchronization can be done one-way, or two-way, i.e. pushing a set of fields from the Domino Directory to the remote LDAP Directory and pulling another set of fields from the remote LDAP Directory, depending on the needs.

The synchronization should best be done between those servers at the toplevel of the corresponding directory replication topology.

Note
There is no (known) limitation on the number of directories or directory entries that can be synchronized.

The synchronization takes places on a scheduled basis (delta-time). This deltatime can be set as low as 5 minutes up-to once per week. The information that needs to be synchronized from the LDAP Directory can be set by defining filters and fields while the information from the Domino Directory can be set by setting the form and the fields.

Configuration

The synchronization (in one-way) of 2 directories is done by filling-out a configuration form, stipulating:

1. Synchronization-type:
   • LDAP2Domino: from LDAP to Domino
   • Domino2LDAP: from Domino 2 LDAP
2. The LDAP Directory information that needs to be synchronized is configured through configuration forms by the using the adequate LDAP-filters and the according fields (can be source or target).
3. The Domino Directory information that needs to be synchronized is configured through configuration forms by suing the adequate form-name and the according fields (can be source or target).

Security

As information is to be read-out or written-in of the directories the following permission's are needed:

1. source directory: read
2. target directory: read and write