Active Sync Resource to Resource

Hey guys does anyone know if this is possible? We need to sync up group objects and membership, between a Domino Resource and a LDAP resource via IDM. Has anyone else tried this? Thanks for all the help
[209 byte] By [dmac] at [2007-11-26 9:24:31]
# 1
Are you able to map the group objects and memberships to IdM as an attribute value? I would think that as long as you can do that it would be very simple. Otherwise you might have to use some workflow to create that effect...
JimBeard at 2007-7-7 0:00:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

I haven't done this exact behavior, but I know that it should be possible. You would need the attributes on each resource mapped in the schema resources, and then you would need to code the mapping logic into a form.

This form would be used by the activesync resource and/or the activesync proxy administrator. When activesync processes the user, the values from the authoritative source would be in the view and then Expansions would set the value for the other resource.

Jason

jsallee at 2007-7-7 0:00:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3

First off thanks for the replies!

Jsallee I agree with your reply however the only part that concerns me is that we are dealing with groups on both ends without going through the user. (I.e new group "ME" is created on Domino, we pick it up with activesync, and then provision that group over to LDAP.) So based on that will this still work?

dmac at 2007-7-7 0:00:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 4
Jim, Not quite sure how we would map it back to IDM..considering we aren't mapping these back to indvidiual user's themeselves. Because we want to manage the actual creation/deletion of the groups between the two resources
dmac at 2007-7-7 0:00:07 > top of Java-index,Web & Directory Servers,Directory Servers...
# 5

> First off thanks for the replies!

> Jsallee I agree with your reply however the only

> part that concerns me is that we are dealing with

> groups on both ends without going through the user.

> (I.e new group "ME" is created on Domino, we pick it

> up with activesync, and then provision that group

> over to LDAP.) So based on that will this still work?

Sorry about that -- I read your original question as pertaining to managing users, not the groups themselves.

This is a bit of a challenge, since the out of the box Domino adapter is user-centric. It is possible to Create and Update groups on the LDAP resource adapter, though (at least it would appear so from docs). So the trick would be how to get the info from Domino and then be able to make use of it in the LDAP Adapter.

One possibility is the use of Before Actions on the Domino adapter to send a query for groups created since time X (which would be in the IAPI of the ActiveSync process). The output of this script could be a file, or route to another ActiveSync adapter (LDAPListenerActiveSync?).

Alternatively, you may want to do this in a Workflow that the Domino adapter invokes after a poll cycle. Either use custom code (e.g. a class that updates the LDAP resource through JNDI) or try to leverage the LDAPResourceAdapterBase class.

I have never tried this (even though I wish I had time to), but I'm sure there are several problems to overcome before this will work. For example, you'll need to be able to dumb down the Domino ActiveSync to only do what you want.

Let me know what you find out.

Jason

jsallee at 2007-7-7 0:00:07 > top of Java-index,Web & Directory Servers,Directory Servers...