9.1 Comparison of Password Synchronization 1.0 and Password Synchronization Provided with Identity Manager

Table 9-1 Password Synchronization 1.0 Versus Password Synchronization with Identity Manager

Password Synchronization 1.0

Password Synchronization with Identity Manager 2

Product delivery

A product separate from Identity Manager.

A feature included with Identity Manager, not sold as a separate product.

Platforms

  • Active Directory*

  • NT Domain

Full bidirectional password synchronization is supported on these platforms:

  • Active Directory

  • eDirectoryâ„¢

  • NIS

  • NT Domain

These connected systems support publishing user passwords to Identity Manager. Because Universal Password and Distribution Password are reversible, Identity Manager can distribute passwords to connected systems.

Any connected system that supports the Subscriber password element can subscribe to passwords from Identity Manager.

See Password Synchronization across Connected Systems in the Novell Identity Manager 3.5.1 Administration Guide.

Password used in eDirectory

eDirectory Password (non-reversible)

Universal Password (reversible), or Distribution Password (also reversible). The eDirectory password can also be kept synchronized, if desired. For example scenarios, see Implementing Password Synchronization in the Novell Identity Manager 3.5.1 Administration Guide.

Main functionality for Windows connected systems

To send passwords to Identity Manager so the eDirectory password is synchronized with the Windows password. Because the eDirectory password was not reversible, passwords were not sent back to NT or AD.

To provide bidirectional password synchronization. Because Universal Password and Distribution Password are reversible, passwords can be synchronized in both directions.

LDAP changes

Not supported.

Supported

Novell Clientâ„¢

Required.

Not required.

nadLoginName attribute

Used for keeping passwords updated.

Not used.

The component that contains the password synchronization functionality

The Identity Manager driver contained the functionality for updating nadLoginName.

Policies in the driver configuration provide the password synchronization functionality. The driver simply carries out the tasks given by the Metadirectory engine, which come from logic in the policies.

The driver manifest, global configuration values, and driver filter settings must also support password synchronization. These are included in the sample driver configurations, or can be added to an existing driver. See Section 9.4, Upgrading Existing Driver Configurations to Support Identity Manager Password Synchronization.

Agents

A separate piece of software.

No agents are installed; instead, the functionality is now part of the driver.