Filtered Index

Have more than one AD driver? How do you handle DirXML-ADAliasName and DirXML-ADContext? Here is a different approach to handling as many AD drivers as you need, without conflicts.

Recently I was working on an Active Directory driver, and the task we had was to add regular users from the Identity Vault into a new Active Directory domain as Contact object. The notional use case here was to get all the current users into the Exchange address book.

Well it turns out there were a couple of really interesting issues we encountered along the way that are worth discussing, and hopefully will be useful to others.

This article describes how to successfully utilise the Kerberos and PasswordFetch classes in Access Manager 3 to provide Single Sign-on to username/password downstream web services.

In-depth interview with David Condrey and Sophia Germanides covers new features in the product and how Novell Storage Manager can set significant cost controls on the largest line item in a CEO's budget—storage.

Our client is concerned about a well known behavior in AD with regards to synchronization of the last logon time of a user. In Active Directory, the attribute lastLogon contains the last time a user logged in. This attribute, however, is not replicated between domain controllers. Therefore, since IDM runs off one of those domain controllers, only user who logged in at that specific DC would be synchronized. This solution demonstrates how to use the scripting driver to retrieve more updated data for lastLogon.

In addition to identity management consulting, our company provides outsourcing of Identity Management solutions to our clients. In some cases the client continues to operate their own Active Directory environment. But sometimes the client doesn't pay attention to our instructions about AD maintenance leading to issues. To help solve this problem, we have crafted a little solution which will notify us automagically by eMail whenever a new domain controller appears on the network.