Table 9-1 Password Synchronization 1.0 Versus Password Synchronization with Identity Manager
Password Synchronization 1.0 |
Password Synchronization with Identity Manager 2 |
|
---|---|---|
Product delivery |
A product separate from Identity Manager. |
A feature included with Identity Manager, not sold as a separate product. |
Platforms |
|
Full bidirectional password synchronization is supported on these platforms:
These connected systems support publishing user passwords to Identity Manager. Because Universal Password and Distribution Password are reversible, Identity Manager can distribute passwords to connected systems. Any connected system that supports the Subscriber password element can subscribe to passwords from Identity Manager. See |
Password used in eDirectory |
eDirectory Password (non-reversible) |
Universal Password (reversible), or Distribution Password (also reversible). The eDirectory password can also be kept synchronized, if desired. For example scenarios, see |
Main functionality for Windows connected systems |
To send passwords to Identity Manager so the eDirectory password is synchronized with the Windows password. Because the eDirectory password was not reversible, passwords were not sent back to NT or AD. |
To provide bidirectional password synchronization. Because Universal Password and Distribution Password are reversible, passwords can be synchronized in both directions. |
LDAP changes |
Not supported. |
Supported |
Novell Clientâ„¢ |
Required. |
Not required. |
nadLoginName attribute |
Used for keeping passwords updated. |
Not used. |
The component that contains the password synchronization functionality |
The Identity Manager driver contained the functionality for updating nadLoginName. |
Policies in the driver configuration provide the password synchronization functionality. The driver simply carries out the tasks given by the Metadirectory engine, which come from logic in the policies. The driver manifest, global configuration values, and driver filter settings must also support password synchronization. These are included in the sample driver configurations, or can be added to an existing driver. See Section 9.4, Upgrading Existing Driver Configurations to Support Identity Manager Password Synchronization. |
Agents |
A separate piece of software. |
No agents are installed; instead, the functionality is now part of the driver. |