I understand Lotus ADSync lets an Active Directory administrator manage users in both, Domino Directory as well as Active Directory.
Can someone explain in more detail what the mechanism is for password management? What happens for example, if you want to login to your Notes account offline? I can see how you could login to your Windows laptop off the network, but in case of Notes, how would you access it? Also, what are the limitations, if any, of changing your password offline or online?
This seems to aleviate a lot of the potential headaches in administering passwords, but if it is such good solution, how come not everybody uses it? What would be a rough estimate of installations using ADSync out there? I know we don’t use it in our organization.
The reason I ask, is because we are working on a “password reset” solution for Notes, but it will be IVR-based. We have already discarded the option of messing with the Notes ID file, since it resides on the client as opposed to the server, and this simple fact creates many implementation problems…
At a seminar last Fall, one of the speakers said “ADSync is not ready for production use”. He is one of the writers of the Lotus/IBM certification test, so I think he knows what he’s talking about. We trashed our plans to implement ADSync because of his comments.
Do you know whether ADSync manages the “Notes client” password (the windows application installed in a user’s PC) or simply the “internet” (http) password, which you would use to access your mail file using a web browser?
I am trying to really understand what the value of this utility is…
I’m very interested in any answers you get, because I’m working in this area myself, and have found generally that Lotus guru’s will warn you off AdSync (very gently) as being a “weak” solution.
My case is outside of AdSync’s capabilities, so I’m looking elsewhere for an answer. I need to be able to push Domino passwords into AD, not the other way round. AdSync seems to be unable to add AD capability to Domino, but does add Domino capability to AD.
I will share anything I find, and hope you can do the same.
In it, they suggest that the strenght of ADSync is in keeping users and groups in synch. They recommend ‘single sign on’ (SSO) at the client level for synchronizing passwords.
Ok, so what happens if we are dealing with an existing installation? Can the clients be reconfigured for SSO, or does it require a fresh installation from scratch?