HP Reference Information Storage System v1.6 Administrator Guide (T3559-96073, July 2007)

Mapping advance
doptions
Click the Advanced Options icon ( ) to display the advanced options.
Figure 8 Advanced options
1. Complete the advanced options form by entering the following information:
•GroupName:
Notusedatthistime.
• USNChanged: ActiveDirectory’suniquesequencenumber(USN).ActiveDirectory
increments the USN for each change in any of its user accounts. When DAS finds a larger
USN, it extracts new information. For initial setup, set USNChanged to 1 so DAS extracts all
users. Thereafter, do not change this value.
• Delete USNChanged: USN in deleted users directory. This is the same as USNChanged but
for deleted objects. For initial setup, set this value to 0. Thereafter, do not change this value.
Thisvaluemustbesetto0thefirsttimethemappingissetup.
For Domino, ignore this field because it is not enabled.
•NextRep
ID: RISS repositor y ID assigned to new users. DAS retrieves this value from the
databa
se, but you can use this feature to specif y the repository ID for the first user inserted
when DAS runs. For example, if you enter 67, the repository created and assigned for
the first imported user is R00 00067. You can use this feature if users already exist in the
system or to reserve rep ository IDs for any reason. If you specify a value that is lower than
an exi
sting repository ID, DAS automatically changes the value to the next higher number.
The de
fault is set to 5.
•AuditRepository:Donotchange.
• Update LDAP filter: Criteria to include or exclude specificusers.Forexample:
For E
xchange,useatleastthedefault,(objectclass=user)(mail=*),whichexcludesusers
who do not have email a cc ounts.
For Domino, enter at least the minimum filter:(objectclass=dominoPerson)(mail=*).
•LDAP
Query return attributes: List of return at tributes. Examples:
For Exchange, use the default attributes unless your LDAP schema requires mapping changes.
For Domino, use the following at tributes: uid,sn,modifytimestamp,createtimes-
tamp,cn,givenName,mail,sn,dominouid,dominodn, dominoproxyaddresses.
The u
ser name is mapped to the Domino uid. The Domino Username attribute can contain
multiple user names, b ut only the primary user name is imported to RISS.
46
Account Synchronization