Home
Updating the LDAP directory
There are a number of scenarios in which you might want to synchronize changes between the Profiles database and the LDAP directory.
When you want to update user information in the Profiles database, the model typically used is to update the information in the LDAP directory and then synchronize the changes back to the Profiles database. For example, if your organization has taken over a new division, you can add new employees to Profiles by importing their details into the LDAP and then synchronizing the changes to the Profiles database. The recommended way to keep your profiles data synchronized with changes to the LDAP is to use the sync_all_dns task. For more information, see Synchronizing LDAP changes with Profiles.
However, there might be instances in which your organization wants to allow users to update their information directly in the Profiles database. For example, if a user wants to update their personal cell phone details, as administrator, you might allow them to make the changes in Profiles themselves. These changes must be synchronized back to the LDAP from Profiles. To start the synchronization process, you need to define values for the DSML server-related properties in the profiles_tdi.properties file and then run the appropriate process_draft_updates script. For more information, see Synchronizing user data between Profiles and LDAP.
Although it is not expected to be a frequent occurrence, there might also be instances in which you want to change your LDAP – for example, if you are moving from a pilot installation of IBM Lotus Connections to a production installation. In this scenario, you can run scripts that are provided with Lotus Connections to synchronize the user information used in Profiles with the user information stored in your new LDAP directory. For more information, see Updating Profiles when changing LDAP directory.
- Synchronize LDAP changes with Profiles
As administrator, you need to synchronize changes from your LDAP to the Profiles database to ensure that your organizational information is kept up-to-date. You can use the sync_all_dns task to keep your profiles data synchronized with changes to the LDAP- Synchronize user data between Profiles and the LDAP directory
To update profiles data, you typically update the LDAP directory first and then synchronize the changes to the Profiles database. However, there are some cases where you might want to allow your users to make their own changes to their profiles, and these changes need to be written from the Profiles database back to the LDAP For example, users in your organization might need to update their cell phone details in Profiles. They cannot change the LDAP directly and, as administrator, you can allow them to make the changes directly in Profiles. These changes then need to be reflected back up to the LDAP using the drafting process.- Updating Profiles when changing LDAP directory
In the event that you need to change your LDAP – for example, if you are moving from a pilot installation of IBM Lotus Connections to a production installation – you need to synchronize the data stored in profiles with the information in your new LDAP You can run commands that synchronize the user information in Profiles with the user information stored in your new LDAP deployment.