Password Synchronization with 389 Directory Server

ADSelfService Plus can automatically keep the users' 389 Directory Server password in sync with their Active Directory (AD) passwords, in real time. The synchronization works for the following operations:

• Password reset

• Password change

• Account unlock

Whether the operation was performed through the self-service portal, or natively using ADUC or Windows login screen (Ctrl+Alt+Del), ADSelfService Plus is capable of synchronizing the changes with 389 Directory Server.

Configuration steps

To enable passoword synchronization between AD and 389 Directory Server, follow the steps given below:

• Log into ADSelfService Plus admin console with admin credentials.

• Navigate to Configuration → Self-Service → Password Sync/Single Sign-On.

• Click the 389 Directory Server tile.

• Enter the System Name/IP Address of the directory server.

• Enter a Display Name for this configuration.

• Enter the Domain Name (E.g.: dc=example,dc=com) of the 389 Directory Server.

• Enter the User Name (E.g.: cn=test user,OU=groups,dc=example,dc=com) and Password of an account that is a member of the Directory Administrator group.

• Enter the Port Number of the 389 Directory Server.

• Put a check against the Enable LDAP SSL box to secure the connection between ADSelfService Plus and the 389 Directory Server.

• Enter a Description for this configuration.

• Select the self-service policies from the Available Policies drop-down.
  Note: Password synchronization will be enabled only for the users who come under the purview of the selected policies.

• Click Save.