Disabling the Driver

It is important not to disable the driver. When a driver is disabled, eDirectory events are not cached.

Partition Issues

• The driver can only access eDirectory objects in the partitions on the server where the driver is installed.
• Users, post offices, resources, and distribution lists must be in the same partition. (Or, the partitions containing these objects must all have replicas on the server running the driver.)

Driver Access Rights and Membership

The driver must have read/write access to User objects, post offices, resources, and distribution lists, and create rights to the post office container in eDirectory. Normally, the driver should be given security equal to Admin.

If you are creating external post offices, the driver also needs read/write access to the domain.

Managing Distribution Lists from the GroupWise Snap-ins

The driver does not manage distribution lists directly and is not aware of the changes to distribution lists. Distribution lists must be managed by the GroupWise snap-ins. Through the user object, any user event can be modified to add or remove the user to or from specific distribution lists. You can also remove the user from all distribution lists.

Synchronizing Group Objects

If the option to synchronize Groups (creating, deleting, renaming, or making membership changes) is enabled, the driver creates a Distribution List in GroupWise when the user creates a Group in eDirectory and then links the two together. If the Group is renamed, the description modified, or users are added or removed to or from the Group, the driver synchronizes the changes with the Distribution List in GroupWise. This corresponds to similar functionality in the GroupWise snap-ins for ConsoleOne^®.

The default Placement policy adds the Distribution Lists to the post office specified when the driver is created. If you want the Distributions Lists to be added to a different post office, or various post offices depending on some criteria, you need to change the placement policy. See Specifying Distribution Lists for more information.

By default, this occurs for all Groups created in eDirectory. You should add rules to the Create policy to limit what Groups (by containment or attribute value) get processed by the driver.

GroupWise Distribution List objects in eDirectory are not treated this way by the driver. The driver does not respond to changes made to GroupWise distribution lists, because the only way to create, delete, or modify these objects is using the GroupWise snap-ins (and the snap-ins do the synchronization). However, you can add or remove users to or from the GroupWise distribution lists by modifying events on individual users.

Removing a GroupWise Account Using the GroupWise Snap-Ins

Use the steps in this section if it is necessary to remove the GroupWise account using the GroupWise snap-ins.

1. Do one of the following:

   • If a DirXML association exists, change the state to Disabled.

     When the user has a DirXML association to the driver with the state set to Disabled, and an attribute is changed in eDirectory, DirXML disregards the modify request.

   • If a DirXML association does not exist, manually create one, set the associated object ID to any value, then set the state to Disabled.

     When the user does not have a DirXML association and an attribute is changed on the eDirectory user, the GroupWise account is re-created. When a user has a DirXML association to the driver with the state set to Disabled, and an attribute is changed in eDirectory, DirXML discards the modify request.

2. Delete the GroupWise account.

3. To re-create the GroupWise account, delete the association.

4. Change an eDirectory attribute on the user that the driver watches for modifications or Resync.

Re-associating a GroupWise Account with an eDirectory User

Administrators sometimes delete the value of the GroupWise ID attribute (disassociate) from an eDirectory user and then re-associate (graft) it. This action resets the relationship between an eDirectory user and a GroupWise account. This action only involves the GroupWise snap-ins and does not involve the driver. Care should be taken when using this procedure. Changes made to the eDirectory user between the time the GroupWise ID is deleted and the user is re-associated are not synchronized to GroupWise. This is not a recommended procedure. Refer to the GroupWise Documentation for known issues and precautions.

User Renames

Using the GroupWise snap-ins to rename users is not recommended. However, if the user is renamed using the GroupWise snap-ins, it must done with GroupWise 6 Support Pack 1 or higher. Otherwise, the driver could generate errors.

Migrate from eDirectory

For more information, refer to Migrating eDirectory Users to GroupWise.

Deleting Users and Accounts Using the GroupWise Snap-Ins

You can delete an eDirectory User and the corresponding GroupWise account with the GroupWise snap-ins. The recommended procedure is to remove the user from the authoritative data source and let the driver remove the account from GroupWise. The eDirectory user must have a valid DirXML association to the driver for this to work. The driver might log a warning or error if the account is deleted using the GroupWise snap-ins. The object might have already been removed by the GroupWise snap-ins when the driver tries to delete it.