A.1 Driver Configuration

In iManager:

  1. Click to display the Identity Manager Administration page.

  2. Open the driver set that contains the driver whose properties you want to edit:

    1. In the Administration list, click Identity Manager Overview.

    2. If the driver set is not listed on the Driver Sets tab, use the Search In field to search for and display the driver set.

    3. Click the driver set to open the Driver Set Overview page.

  3. Locate the driver icon, then click the upper right corner of the driver icon to display the Actions menu.

  4. Click Edit Properties to display the driver’s properties page.

    By default, the Driver Configuration page is displayed.

In Designer:

  1. Open a project in the Modeler.

  2. Right-click the driver icon or line, then select click Properties > Driver Configuration.

The Driver Configuration options are divided into the following sections:

A.1.1 Driver Module

The driver module changes the driver from running locally to running remotely or the reverse.

Table A-1 Driver Module

Option

Description

Java

Used to specify the name of the Java class that is instantiated for the shim component of the driver. This class can be located in the classes directory as a class file, or in the lib directory as a .jar file. If this option is selected, the driver is running locally.

The java class name is:

com.novell.nds.dirxml.driver.notes.NotesDriverShim

Native

This option is not used with the Lotus Notes driver.

Connect to Remote Loader

Used when the driver is connecting remotely to the connected system. Designer includes two suboptions:

  • Driver Object Password: Specifies a password for the Driver object. If you are using the Remote Loader, you must enter a password on this page. Otherwise, the remote driver does not run. The Remote Loader uses this password to authenticate itself to the remote driver shim.

  • Remote Loader Client Configuration for Documentation: Includes information on the Remote Loader client configuration when Designer generates documentation for the driver.

A.1.2 Driver Object Password (iManager Only)

Table A-2 Driver Object Password

Option

Description

Driver Object Password

Use this option to set a password for the driver object. If you are using the Remote Loader, you must enter a password on this page or the remote driver does not run. This password is used by the Remote Loader to authenticate itself to the remote driver shim.

A.1.3 Authentication

The Authentication section stores the information required to authenticate to the connected system.

Table A-3 Authentication

Option

Description

Authentication ID

or

User ID

Specify a user application ID. This ID is used to pass Identity Vault subscription information to the application.

Example: CN=NotesDriver/o=novell

Authentication Context

or

Connection Information

Specify the IP address or name of the server the application shim should communicate with.

The connection string uses the following format: CN=DominoServer1/o=novell

Remote Loader Connection Parameters

or

Host name

Port

KMO

Other parameters

Used only if the driver is connecting to the application through the remote loader. The parameter to enter is hostname=xxx.xxx.xxx.xxx port=xxxx kmo=certificatename, where the hostname is the IP address of the application server running the Remote Loader server and the port is the port the Remote Loader is listening on. The default port for the Remote Loader is 8090.

The kmo entry is optional. It is only used when there is an SSL connection between the Remote Loader and the Metadirectory engine.

Example: hostname=10.0.0.1 port=8090 kmo=IDMCertificate

Driver Cache Limit (kilobytes)

or

Cache limit (KB)

Specify the maximum event cache file size (in KB). If it is set to zero, the file size is unlimited.

Click Unlimited to set the file size to unlimited in Designer.

Application Password

or

Set Password

Specify the password for the user object listed in the Authentication ID field.

Remote Loader Password

or

Set Password

Used only if the driver is connecting to the application through the Remote Loader. The password is used to control access to the Remote Loader instance. It must be the same password specified during the configuration of the Remote Loader on the connected system.

A.1.4 Startup Option

The Startup Option section allows you to set the driver state when the Identity Manager server is started.

Option

Description

Auto start

The driver starts every time the Identity Manager server is started.

Manual

The driver does not start when the Identity Manager server is started. The driver must be started through Designer or iManager.

Disabled

The driver has a cache file that stores all of the events. When the driver is set to Disabled, this file is deleted and no new events are stored in the file until the driver state is changed to Manual or Auto Start.

Do not automatically synchronize the driver

This option only applies if the driver is deployed and was previously disabled. If this is not selected, the driver re-synchronizes the next time it is started.

A.1.5 Driver Parameters

The Driver Parameters section lets you configure the driver-specific parameters. When you change driver parameters, you tune driver behavior to align with your network environment.

The parameters are presented by category:

Table A-4 Driver Settings

Option

Description

Notes Domain Name

Specify the name of the Notes Domain. An example is NotesDomain.

Notes Driver User ID File

Specify the full path (on the Domino Server) for the Notes User ID file associated with the Notes User this driver will use for Notes Authentication. An example is c:\lotus\domino\data\admin.id.

Default Certifier ID File

Specify the full path (on the Domino server) for the Default Notes Certifier ID file the driver will use as the default certifier. This is usually the root certifier, but can be any certifier with adequate access. An example is c:\lotus\domino\data\cert.id.

Default Certifier Password

Specify the password for the Default Notes Certifier ID this driver will use when certifying new users, then reconfirm the password. You can also clear the password.

This password is secured by using the Named Passwords feature. See Section 5.3, Using Named Passwords.

Directory File

The Notes database filename the Notes Driver is synchronizing. For example, names.nsf is the Notes public address book.

Notes Address Book?

Select True if the Notes database that is being synchronized is a Notes Address Book. Select False if the Notes database that is being synchronized is not a Notes Address Book.

Update File

The ndsrep program creates an output database (by default, ndsrep.nsf), detects changes in the address book in the Domino server (or other Notes database), and copies these changes to the output database. The default filename is ndsrep.nsf.

Table A-5 Subscriber Settings

Option

Description

Certify (register) Notes Users

Whether the driver should certify users added to Notes on the Subscriber channel. The default is True.

If the Certify (register) Notes Users option is True, you must set the Add Registered Users to Address Book option to True.

Registration/Certification Log File

The Certification log file of the Domino server (certlog.nsf). For the Notes driver to register or certify Notes users, the Notes driver user must have rights to create entries in this database.

Default User ID File/Registration Expiration Term (in years)

Specify the expiration term (in years) for ID files created by the driver when certifying users added on the Subscriber channel. The default is 2.

User ID File Storage Location

The full directory path of the location to create UserID files for newly created users.

Add Registered Users to Address Book

If the Certify (register) Notes Users option is already set to True, you must set the Add Registered Users to Address Book option to True.

Store User ID file in Address Book?

Whether Notes should store new user IDs in the address book when certifying users added to Notes on the Subscriber channel. The default is False.

Is Domino Server North American?

Is the Domino server this driver is binding to when certifying new users a North American Domino server? (This affects encryption levels.) Choose True for 128-bit encryption. The default is True.

Notes Password Strength (0 - 16)

Specify the minimum password strength for new Notes user IDs (0 - 16). The default is 5.

Create User E-mail Box

Select the desired option. Select True if you want to create a Notes e-mail account for users. Select False if you do not want to create an e-mail account for users. The default is True.

Domino Mail Server Name

Specify the name of the Domino mail server this driver will authenticate to (in fully qualified canonical form, such as cn=MyMailServer/o=Organization).

Mail File Template

Specify the filename (on the Domino server) for the mail database template this driver will use when creating new mailfile users. The path should be relative to the Domino mail server’s data directory.

The name of the template corresponds to the Domino version: mail6.ntf, mail7.ntf, mail8.ntf, or mail85.ntf.

User Mail File Storage Location

Specify the directory where you want to store user mail files. An example value is mail.

Default Notes Password

Specify the default password for newly registered users if no other password is supplied to the Notes driver shim. An example value is notes.

Default Notes HTTP Password

Specify the default Notes Web HTTP password for new Notes users if no other password is supplied to the Notes driver shim. An example value is notes.

Table A-6 Publisher Settings

Parameter

Description

Polling Interval (in seconds)

Specify the polling interval (in seconds) for how often the Publisher channel checks the change log for updates. The default is 30.

Enable Loop Back Detection

Select True to enable event loopback capability, or False to disable event loopback detection. Loopbacks cannot be used to determine object changes if they are performed by the Administration Process (AdminP). The default is True.

NDSREP Polling Units

The units of time used to specify the ndsrep polling interval. You can specify Seconds, Minutes, Hours, Days, or Years. The default is Seconds.

NDSREP Polling Interval

A positive integer specifying the polling interval for ndsrep. The default value is 30.

DN Format

Specify the distinguished name format used by the Publisher channel. Changing this parameter might also necessitate changing the Publisher Placement policy where the Notes Source DN is often interpreted to determine Identity Vault object placement.

The choices are NOTES_TYPED, NOTES, SLASH_TYPED, SLASH, LDAP_TYPE, LDAP, DOT_TYPED, and DOT. The default is SLASH.

NDSREP Domino Console Trace Level

Specify the Domino console trace setting. The choices are Silent, Normal, Verbose, and Debug. The default is Normal.

Check Attributes

Whether all attributes should be checked for each object event. Select True for only changed attribute values to be published from Notes to Identity Manager. Select False for all attributes within the Publisher channel filter to be published from Notes to Identity Manager if a changed attribute is detected. The default is True.

Write Time Stamps

Whether driver time stamps should be written to each synchronized object. Select True to attach a Notes driver-specific time stamp to each object that the Notes driver modifies. This action is done to improve the driver’s ability to detect object changes from replicated databases. Select False to disallow any special time stamps from being attached to Notes objects. The default is False.

Publisher heartbeat interval

Allows the driver to send a periodic status message on the Publisher channel when there has been no Publisher channel traffic for the given number of seconds.

The default value is 1 second.