Google Postini Directory Sync Configuration Guide Manual de usuario Pagina 1

Configuration Guide for Postini Directory Sync

10 Configuration Guide for Directory SyncDirectory Sync acts as a one-way synchronization tool. Your users and aliases in the email protection service

Microsoft Active Directory 11Microsoft Active DirectoryChapter 3Directory Sync with Microsoft Active DirectoryMicrosoft Active Directory is an LDAP ba

12 Configuration Guide for Directory SyncInstall IISDSML services require that IIS be installed on your server:1. Double click the “Add / Remove Progr

Microsoft Active Directory 131. Double-click on the DSFW.msi file that you have downloaded earlier.2. Windows will launch the DSML Installation Wiza

14 Configuration Guide for Directory Sync2. Enter the IIS web site name that you want to associate with DSML. If you are not sure which site to use, u

Microsoft Active Directory 15.6. In Step 2 of the configuration and enabling process, make sure the name of your Active Directory domain is correct

16 Configuration Guide for Directory SyncVerify DSMLUse the sample Visual Basic test (included with DSML Services for Windows) to test your configurat

Microsoft Active Directory 17In the sample directory, use cscript to run “dsmltestcred.vbs”. You may want to view the sample code by typing “type ds

18 Configuration Guide for Directory SyncEnable SSL in the DSML ModuleOnce you have completed the test, enable SSL in the DSML to set a secure connect

Microsoft Active Directory 195. Click Server Certificate... to start the IIS Certificate Wizard.

2 Configuration Guide for Directory Sync Postini, Inc.959 Skyway Road, Suite 200San Carlos, CA 94070www.postini.comPart number: DSCON_6.10_085 June 2

20 Configuration Guide for Directory Sync6. Click Next.7. Choose Create a new certificate and click Next.

Microsoft Active Directory 218. Choose to Prepare the request now, but send it later. Click Next.9. Enter a name for the new certificate and leave t

22 Configuration Guide for Directory Sync10. Enter the names for organization and organization unit that will be stored in the new certificate. and cl

Microsoft Active Directory 2312. Enter the State/province and City/locality fields. Click Next.13. Enter the location to store the certificate reque

24 Configuration Guide for Directory Sync14. View the summary and confirm that the information is correct. Go back and make any changes if needed. Whe

Microsoft Active Directory 252. Check the Certificate Services check box. A popup confirmation will appear.3. Click Yes to confirm that you wish to

26 Configuration Guide for Directory Sync4. Choose Stand-alone root CA. Click Next.

Microsoft Active Directory 275. Enter the name of the IIS machine for the Common Name for this CA. Click Next to continue.6. Use the default locatio

28 Configuration Guide for Directory Sync2. Click Request a certificate.3. Click Advanced certificate request.

Microsoft Active Directory 294. Click Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by u

Contents 3ContentsChapter 1: Introduction to Directory Sync 5About Directory Synchronization 5Installation Introduction 5System Requirements 6Chapte

30 Configuration Guide for Directory SyncIssue Pending Certificate RequestAfter a certificate request is submitted, it remains in the queue waiting to

Microsoft Active Directory 312. Click Check on a pending cert.3. Click on the saved certificate on the screen.4. Click Download Certificate and save

32 Configuration Guide for Directory SyncInstall the New CertificateInstall the new certificate to IIS.1. Launch IIS Manager from Start -> All Prog

Microsoft Active Directory 33Enable SSLConfigure Basic Authentication for Default Web Site and /dsmlThere are several web site authentication method

34 Configuration Guide for Directory SyncEnable SSLNow that you have configured basic authentication, you can enable SSL for connections to the machin

Microsoft Active Directory 355. Add the following registry value:Name: UserTokenTTLType: REG_DWORDData: 06. Quit Registry Editor.7. Restart IIS.Disa

36 Configuration Guide for Directory Sync5. At the server connection command prompt, type connect to server ServerNameServerName is the DNS name of th

Microsoft Active Directory 37• Server Type (MS Active Directory 2000 or 2003)• Base DN (distinguished name)TroubleshootingIf you experience problems

38 Configuration Guide for Directory Sync

IBM Lotus Domino Directory Server 39IBM Lotus Domino Directory ServerChapter 4Directory Sync with IBM Lotus DominoThis document gives instructions on

4 Configuration Guide for Directory Sync Install WebSphere Express 44Install WebSphere Application Server 44Copy Libraries 44Configure WebSphere Expr

40 Configuration Guide for Directory SyncIf you are using an IBM Tivoli Directory Server, the DSML server connects to the IBM Tivoli Directory Server

IBM Lotus Domino Directory Server 41• Application Server: Using DSML requires an application server. These instructions describe the use of the Expr

42 Configuration Guide for Directory Sync6. Install DSML7. Collect information for Directory Sync setupEach of these steps is documented in a separate

IBM Lotus Domino Directory Server 43Install Java librariesRunning the DSML server requires downloading and installing several Java libraries. Downlo

44 Configuration Guide for Directory SyncInstall WebSphere ExpressThese steps describe installing WebSphere Application Server, which is bundled with

IBM Lotus Domino Directory Server 452. Copy the soap.war file from the directory where you’ve unpacked the Apache SOAP v2.3.1 package to the C:\IBM\

46 Configuration Guide for Directory Sync4. Copy the file server.xml to server.xml.original as a backup. The server.xml file is in the directory: C:\I

IBM Lotus Domino Directory Server 472. Copy the file soap.war from the Apache SOAP v2.3.1 package into C:\IBM\LDAP\V6.0\appsrv\installableApps\soap.

48 Configuration Guide for Directory SyncUse the browser verification pageYou can also use a web browser to test the WebSphere application.1. Find the

IBM Lotus Domino Directory Server 49Unpack DSML.zip1. Find the DSML.zip file in C:\IBM\LDAP\V6.0\idstools.2. Unzip the DSML.zip into C:\DSML.Modify

Introduction to Directory Sync 5Introduction to Directory SyncChapter 1About Directory SynchronizationThe email protection service is a managed servic

50 Configuration Guide for Directory Sync xml2JavaClassName="org.apache.soap.encoding.soapenc.BeanSerializer"/> </isd:map

IBM Lotus Domino Directory Server 51Note: If you are using a different URL for the SOAP server, specify the correct URL for the SOAP server. The URL

52 Configuration Guide for Directory SyncUse the LDAP browser to collect the following information:• User name and password to connect to your LDAP se

IBM Lotus Domino Directory Server 532. With a text editor, create a file with the following content and name it “batchrequest.dsml” and save it in y

54 Configuration Guide for Directory Sync3. Run the following command from C:\DSML directory, substitute “cn=Domino Admin” and “secret” with the prope

IBM Lotus Domino Directory Server 55• Create a server configuration document• Download Apache Xerces v1.4.4, Apache SOAP v2.3.1, Java J2SE SDK v1.4.

56 Configuration Guide for Directory Sync[SOAPException: faultCode=SOAP-ENV:Server; msg=Exception while handling service request: org/apache/soap/Enve

Sun ONE Directory Server 57Sun ONE Directory ServerChapter 5Directory Sync with Sun ONE DSThe Sun ONE Directory Server 5.2 product includes a Director

58 Configuration Guide for Directory SyncEnable SSLSecure Sockets Layer (SSL) provides encrypted communications between a client and server. Directory

Sun ONE Directory Server 59The first time you configure SSL on your server, you must set the password for your security device. Be sure to keep this

6 Configuration Guide for Directory SyncSystem RequirementsDirectory Sync requires the following:• A directory server. Directory Sync can connect to M

60 Configuration Guide for Directory Sync6. Click Next to continue.7. Enter the password of your security device, then click Next. This is the passwor

Sun ONE Directory Server 61When the CA sends a response, save the information in a text file. Back up the certificate data in a safe location, so yo

62 Configuration Guide for Directory Sync2. On the top-level Tasks tab of the Directory Server console, click the Manage Certificates button.The Manag

Sun ONE Directory Server 63Install DSMLEnable DSML through the Directory Server console. 1. Log into the directory server console. Start the console

64 Configuration Guide for Directory SyncConfiguring Basic Authentication1. Log into the directory server console. Start the console from the director

Sun ONE Directory Server 65Note: You can not use cn=Directory Server as the user name in the HTTP Authentication header. To set up DSML Identity Map

66 Configuration Guide for Directory SyncCollect Information for Directory Sync setupOnce you’ve enabled all components, you’ll collect information fr

Architecture 7ArchitectureChapter 2About Directory Sync ArchitectureDirectory Sync is an optional feature included with the enterprise edition of the

8 Configuration Guide for Directory SyncDSMLDSML (Directory Services Markup Language) is a protocol which uses XML (Extensible Markup Language), a mac

Architecture 92. Directory Sync opens a secure SSL connection to the address you have provided, and logs on to your DSML server using basic authenti