LDAPSync

The LDAPSync solution provides both migration and synchronization services from one or more source systems, such as Sun Directory Server and Active Directory, to a target LDAP directory server. This solution is created with IBM® Security Directory Server as the target.

The LDAPSync solution replaces the deprecated Active Directory synchronization.

LDAPSync is designed to migrate and synchronize person and group entries. It can also handle container classes, like organizationalUnit and dcObject. A subtree in the source directory is mirrored in the target, you specify the property settings for mirroring hierarchies.

To handle passwords, you can use the pass-through authentication feature of IBM Security Directory Server, which you can configure to migrate passwords as the users authenticate. You can use this feature if the source system continues to exist, for example a network operating system (NOS) directory like Active Directory. The passwords are not handled by the LDAPSync solution. For more information, see Pass-through authentication.