A.1 Driver Configuration

In iManager:

  1. Click to display the Identity Manager Administration page.

  2. Open the driver set that contains the driver whose properties you want to edit:

    1. In the Administration list, click Identity Manager Overview.

    2. If the driver set is not listed on the Driver Sets tab, use the Search In field to search for and display the driver set.

    3. Click the driver set to open the Driver Set Overview page.

  3. Locate the driver icon, then click the upper right corner of the driver icon to display the Actions menu.

  4. Click Edit Properties to display the driver’s properties page.

    By default, the Driver Configuration page is displayed.

In Designer:

  1. Open a project in the Modeler.

  2. Right-click the driver icon or line, then select click Properties > Driver Configuration.

The Driver Configuration options are divided into the following sections:

A.1.1 Driver Module

The driver module changes the driver from running locally to running remotely or the reverse.

Java: Used to specify the name of the Java class that is instantiated for the shim component of the driver. This class can be located in the classes directory as a class file, or in the lib directory as a .jar file. If this option is selected, the driver is running locally.

The java class name is:

com.novell.nds.dirxml.driver.notes.NotesDriverShim

Native: This option is not used with the Lotus Notes driver.

Connect to Remote Loader: Used when the driver is connecting remotely to the connected system. Designer includes two suboptions:

  • Remote Loader Client Configuration for Documentation: Includes information on the Remote Loader client configuration when Designer generates documentation for the driver.

  • Driver Object Password: Specifies a password for the Driver object. If you are using the Remote Loader, you must enter a password on this page. Otherwise, the remote driver does not run. The Remote Loader uses this password to authenticate itself to the remote driver shim.

A.1.2 Driver Object Password

Driver Object Password: Use this option to set a password for the driver object. If you are using the Remote Loader, you must enter a password on this page or the remote driver does not run. This password is used by the Remote Loader to authenticate itself to the remote driver shim.

A.1.3 Authentication

The Authentication section stores the information required to authenticate to the connected system.

User ID: Specify a user application ID. This ID is used to pass Identity Vault subscription information to the application.

Example: CN=NotesDriver/o=novell

Connection Information: Specify the IP address or name of the server the application shim should communicate with.

The connection string uses the following format: CN=DominoServer1/o=novell

Remote Loader Connection Parameters: Used only if the driver is connecting to the application through the Remote Loader. The parameter to enter is hostname=xxx.xxx.xxx.xxx port=xxxx kmo=certificatename, where the hostname is the IP address of the application server running the Remote Loader server and the port is the port the Remote Loader is listening on. The default port for the Remote Loader is 8090.

The kmo entry is optional. It is only used when there is an SSL connection between the Remote Loader and the Metadirectory engine.

Example: hostname=10.0.0.1 port=8090 kmo=IDMCertificate

Application Password: Specify the password for the user object listed in the Authentication ID field.

Remote Loader Password: Used only if the driver is connecting to the application through the Remote Loader. The password is used to control access to the Remote Loader instance. It must be the same password specified during the configuration of the Remote Loader on the connected system.

Cache limit (KB): Specify the maximum event cache file size (in KB). If it is set to zero, the file size is unlimited.

Click Unlimited to set the file size to unlimited in Designer.

A.1.4 Startup Option

The Startup Option section allows you to set the driver state when the Identity Manager server is started.

Auto start: The driver starts every time the Identity Manager server is started.

Manual: The driver does not start when the Identity Manager server is started. The driver must be started through Designer or iManager.

Disabled: The driver has a cache file that stores all of the events. When the driver is set to Disabled, this file is deleted and no new events are stored in the file until the driver state is changed to Manual or Auto Start.

Do not automatically synchronize the driver: This option only applies if the driver is deployed and was previously disabled. If this is not selected, the driver re-synchronizes the next time it is started.

A.1.5 Driver Parameters

The Driver Parameters section lets you configure the driver-specific parameters. When you change driver parameters, you tune driver behavior to align with your network environment.

The parameters are presented by category:

Driver Options

Notes Domain Name: Specify the name of the Notes Domain. An example is NotesDomain.

Notes Driver User ID File: Specify the full path of the Notes User ID file located on the Lotus Notes client workstation. The Notes User ID file contains details about the Notes user that the driver will use for authenticating with Lotus Notes. For example c:\lotus\notes\data\admin.id.

Default Certifier ID File: Specify the full path of the Default Notes Certifier ID file located on the Lotus Notes client workstation that the driver will use as the default certifier. This is usually the root certifier, but it can be any certifier with adequate access. For example c:\lotus\notes\data\cert.id.

Default Certifier Password: Specify the password for the Default Notes Certifier ID this driver will use when certifying new users, then reconfirm the password. You can also clear the password.

This password is secured by using the Named Passwords feature. See Section 5.3, Using Named Passwords.

Directory File: The Notes database filename that the Notes Driver is synchronizing. For example, names.nsf is the Notes public address book.

Notes Address Book: Select True if the Notes database that is being synchronized is a Notes Address Book. Select False if the Notes database that is being synchronized is not a Notes Address Book.

Update File: The ndsrep program creates an output database (by default, ndsrep.nsf), detects changes in the address book in the Domino server (or other Notes database), and copies these changes to the output database. The default filename is ndsrep.nsf.

Enable Cache: Select True to cache the UNIDs for the group membership related operations. It is recommended to use cache for large databases with very slow response time. Select False to disable the cache functionality. The default is False.

Cache Refresh Interval: Specify the refresh interval time in minutes. The default value is 60 minutes. The driver refreshes the cache when the interval between the last group-related operation and the most recent operation exceeds the cache refresh duration that you specified during driver configuration. The driver does not refresh the cache if there are frequent updates to the Group membership in the database.

Subscriber Settings

Certify (register) Notes Users: Select whether the driver should certify users added to Notes on the Subscriber channel. The following options are displayed only if you select True.

  • Registration/Certification Log File: The Certification log file of the Domino server (certlog.nsf). For the Notes driver to register or certify Notes users, the Notes driver user must have rights to create entries in this database.

  • Default User ID File/Registration Expiration Term (in years): Specify the expiration term (in years) for ID files created by the driver when certifying users added on the Subscriber channel. The default is 2.

  • User ID File Storage Location: The full directory path of the location to create UserID files for newly created users.

  • Add Registered Users to Address Book: Select True if you want to add newly registered users in the Notes Address Book. Select False so newly registered users who have a UserID file created are not placed in the Notes Address Book.

  • Store User ID File in Address Book: Whether Notes should store new user IDs in the address book when certifying users added to Notes on the Subscriber channel. The default is False.

  • Is Domino Server North American?: Whether the Domino server this driver is binding to when certifying new users a North American Domino server. (This affects encryption levels.) Choose True for 128-bit encryption. The default is True.

  • Notes Password Strength (0-16): Specify the minimum password strength for new Notes user IDs (0 - 16). The default is 5.

Create User E-Mail Box: Select True if you want to create a Notes e-mail account for users. Select False if you do not want to create an e-mail account for users. The default is True.

  • Domino Mail Server Name: Specify the name of the Domino mail server this driver will authenticate to (in fully qualified canonical form, such as cn=MyMailServer/o=Organization).

  • Mail File Template: Specify the filename (on the Domino server) for the mail database template this driver will use when creating new mail file users. The path should be relative to the Domino mail server’s data directory.

    The name of the template corresponds to the Domino version: mail8.ntf, mail85.ntf, or mail9.ntf.

  • User Mail File Storage Location: Specify the directory where you want to store user mail files. An example value is mail.

Default Notes Password: Specify the default password for newly registered users if no other password is supplied to the Notes driver shim. An example value is notes.

Default HTTP Password: Specify the default Notes Web HTTP password for new Notes users if no other password is supplied to the Notes driver shim. An example value is notes.

ID Vault Support: Select whether to use ID Vault support. Domino version 8.5 added ID Vault support to store ID files in a separate database.

  • ID Vault database file name: Specify the ID Vault database file.

  • Mark deleted users as inactive in ID Vault: Select whether you want to mark deleted users’ ID files as inactive in the ID Vault database.

Publisher Options

Polling Interval (in seconds): Specify the polling interval (in seconds) for how often the Publisher channel checks the change log for updates. The default is 30.

Enable Loop Back Detection: Select True to enable event loopback capability, or False to disable event loopback detection. Loopbacks cannot be used to determine object changes if they are performed by the Administration Process (AdminP). The default is True.

NDSREP Polling Units: The units of time used to specify the ndsrep polling interval. You can specify Seconds, Minutes, Hours, Days, or Years. The default is Seconds.

NDSREP Polling Interval: A positive integer specifying the polling interval for ndsrep. The default value is 30.

DN Format: Specify the distinguished name format used by the Publisher channel. Changing this parameter might also necessitate changing the Publisher Placement policy where the Notes Source DN is often interpreted to determine Identity Vault object placement.

The choices are NOTES_TYPED, NOTES, SLASH_TYPED, SLASH, LDAP_TYPE, LDAP, DOT_TYPED, and DOT. The default is SLASH.

NDSREP Domino Console Trace Level: Specify the Domino console trace setting. The choices are Silent, Normal, Verbose, and Debug. The default is Normal.

Check Attributes: Whether all attributes should be checked for each object event. Select True for only changed attribute values to be published from Notes to Identity Manager. Select False for all attributes within the Publisher channel filter to be published from Notes to Identity Manager if a changed attribute is detected. The default is True.

Write Time Stamps: Whether driver time stamps should be written to each synchronized object. Select True to attach a Notes driver-specific time stamp to each object that the Notes driver modifies. This action is done to improve the driver’s ability to detect object changes from replicated databases. Select False to disallow any special time stamps from being attached to Notes objects. The default is False.

Publisher heartbeat interval: Allows the driver to send a periodic status message on the Publisher channel when there has been no Publisher channel traffic for the given number of seconds.

The default value is 1 second.

A.1.6 ECMAScript

Displays an ordered list of ECMAScript resource files. The files contain extension functions for the driver that Identity Manager loads when the driver starts. You can add additional files, remove existing files, or change the order the files are executed.

A.1.7 Global Configuration

Displays an ordered list of Global Configuration objects. The objects contain extension GCV definitions for the driver that Identity Manager loads when the driver is started. You can add or remove the Global Configuration objects, and you can change the order in which the objects are executed.