Can Migration Manager be used in a locked down environment where standard LDAP is not available but instead, DC communication is relying on LDAPS (secure LDAP)?
In order to switch to Secure LDAP the following attributes need to be changed in project's container in ADAM database.
To do that, please do the following:
IMPORTANT: backup your ADAM database prior to do any changes!
- stop directory synchronization for all domain pairs
- close QMM console
- open ADSIEDIT.MSC and connect to the ADAM database, selecting CN=<name of the project>
- expand CN=AMMProject_<GUID> container, then CN=Projects
- right-click each CN=<GUID> containers underneath, selecting Properties and validate that aelita-amm-Name value is matching the name of the domain pair you wish to modify
- modify the following values:
For the source domain:
aelita-Amm-SrcSSL=TRUE
aelita-Amm-SourcePort=636
aelita-Amm-SourceGCPort=3269
For the target domain:
aelita-Amm-TrgSSL=TRUE
aelita-Amm-TargetPort=636
aelita-Amm-TargetGCPort=3269
After these changes DSA will connect to source and target DCs using SSL ports.
Please note that the following restrictions / limitations apply to such a scenario:
Created from Case 752976.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center