SMART Directory Sync Known Limitations

Transcription

1 SMART Directory Sync Known Limitations September 2015

2 Table of Contents Known Limitations AD to AD... 3 AD to AD Group Sync... 3 AD to AD User Sync... 3 AD to Domino... 3 AD to Domino Group Sync... 3 Domino to AD Group Sync... 4 Domino to AD User Sync... 4 Installer... 4 Logging... 4 Mapping... 4 Other... 5 Overrides... 5 Password Sync... 5 sidhistory Sync... 5 Synchronization... 5 About Binary Tree... 7 SMART DIRECTORY SYNC KNOWN LIMITATIONS 2

3 Known Limitations AD to AD Deleting an object from both the target and source Active Directory (AD) will cause errors during the next directory synchronization, unless the object row is deleted from the DirSync database. Binary Tree strongly recommends that updates and deletes are made from the source directory only. (159) SMART Directory Sync cannot sync the same source directory to more than one target directory using the same DirSync database. The supported configuration for this is separate instances of SMART Directory Sync writing to separate DirSync SQL databases. (177) Renames and moves fail to work if you are using a manual /repushpull or /resync command. Before running the /repushpull /repush /repull and /resync commands, administrators should clear the target OU of any previously created DirSync objects. (187) When synchronizing from AD to AD, if sub-ous containing objects to be synchronized contain a "#" character in the OU name, the sub-ou will not be created in the Target. (4468) AD to AD Group Sync SMART Directory Sync will create nested group objects as User Objects during syncing when Blank or Invalid LDAP filters have been applied in the Sync Profile for Source OU under User Filter. The user should apply (ObjectClass=x) LDAP filter if they do not want to migrate any of the user objects. (4318) Creating a mapping and synchronizing the group attribute msexchcomanagedbylink from AD to AD will cause a synchronization error in the SMART Directory Sync log and the group object will not be created or updated in the Target AD. (4472) AD to AD User Sync When synching objects into Exchange 2003 (only), the option to hide from the GAL will not function if the Recipient Update Service (RUS) is enabled. (1841) If the AD to AD profile is configured to create mail-enabled users, and the source objects are mail-disabled, the objects in the target directory will be incorrectly stamped with an address policy (if configured). (1851) AD to Domino When creating an Active Directory to Domino sync profile, the Domino Target tab auto selects the previously selected Domino Directory when creating a new profile. (1886) AD to Domino Group Sync Syncing an AD group that does not have Exchange attributes to Domino as a Person document creates a group with no name in the Domino directory. (2529) SMART DIRECTORY SYNC KNOWN LIMITATIONS 3

4 Domino to AD Group Sync When synchronizing groups from Domino to Contact objects in Active Directory, two Domino groups with the same SMTP address will be synched to AD, instead of the second group being skipped. (1549) A nested group will synchronize from Domino to Active Directory even if that group is explicitly listed in the Groups to Exclude list. (1559) When synchronizing from Domino to Active Directory, a group with a "/" as the first character will synchronize to Active Directory as 'O=<groupname> (ex: /group13 will appear as O=group13 with mailnickname as O_Group13). (1866) When SMART Directory Sync is syncing a group from Domino to AD, the CN part of the DN will be created by using the first non-empty field from SQL in the following order: DisplayName, Name, CommonName, PrimaryAlias. If any of these values exceed 64 characters, then the source data will need to be altered to be 64 characters or less, or overrides can be used to truncate the value to 64 characters. (4823) Domino to AD User Sync Installer Logging Domino users with no value in the User Name field will not appear the GAL (without customizing the mapping table to build the Display Name). (1679) The Personal Ranking and Hierarchical level fields, on the Corporate Hierarchical Information tab of the person document (in a Domino Directory) will not automatically appear in the source field mapping table drop down. To map these fields, you must manually type them into the mapping table. (4191) Uninstalling Directory Sync while the UI is running will cause the text in the UI to overlap. The UI should be shut down before uninstalling. (1899) During an installation of the Domino Server component, the installer will remove any remarked out lines in the Notes.ini. A Backup of the Notes.ini is automatically created at the start of the uninstallation for reference. (1973) The default installation path (C:\Program Files\Binary Tree) contains a space between "Binary" and "Tree". If you are also installing CMT for Coexistence on the same servers, there will be two Binary Tree folders, one with a space and one without. This does not impact the functionality of either product. (2207) The msexchmailboxguid value and other AD Binary Data attributes are not written properly to the logs. (1879) Mapping When viewing mappings with errors in the UI, the Entry Type filters do not function properly. (1691) You cannot drag a column to the right-most position in the mapping table. (1858) SMART DIRECTORY SYNC KNOWN LIMITATIONS 4

5 Adding a row in the mapping table automatically sets a value in the Target Type2 field that cannot be blank. To work around this issue, select the same value for both Target Type1 and Target Type2 when a second Target Type is not needed. (2459) Other BT_Config.Description column exists in the SQL table, but is no longer used in the UI. (1427) Enabled IPV6 on the Binary Tree Dirsync servers can cause referral matching to fail. IPV4 is the preferred version. (1454) The LastModified Time column in the BT_Config table is not updating when a profile is saved. (1577) If the BTDirsync or BinaryTree.Dirsync.Exchange.exe service is not running, a warning or error message does not appear in the UI when you attempt to sync. (2552) No shutdown complete message is sent when the BTDirsync service is stopped on the Domino server. (2553) Overrides When you save an override, SMART Directory Sync re-generates the Person or Groups view. It does this by dynamically generating a single SQL statement using the snippet of SQL code that is part of all overrides. The max size for this SQL statement is 8000 total characters. If many new overrides are added this limit could be exceeded and an error when adding the overrides will occur. In addition to the default overrides, approximately more Person and Group overrides can be added before hitting the size limit. (4784) Password Sync SMART Directory Sync will encounter an error if the Administrator password contains double quotes (") when performing the password copy portion of the synchronization. To work around this, ensure the administrator password does not contain double quotes. (4261) sidhistory Sync Currently, the sidhistory synchronization will process on Contacts objects, which don't have sidhistory. This will produce log errors which should just be ignored. (4685) Synchronization Attempts to edit target objects synchronized from Exchange 2010 to Exchange 2003 will result in a dialog prompting you to click 'yes' to upgrade the object to the latest version. Objects should only be updated or deleted from the source directory. (298) Removing a synchronization profile by using the Remove Domain button in the DirSync UI does not remove the information from the DirSync database. (370) If you attempt to manually sync from a command line, and either the source or target server are unavailable, no activity will appear in the command window. (1668) SMART DIRECTORY SYNC KNOWN LIMITATIONS 5

6 Resync (same as repushpull but runs for all profiles) and pushpull can only be run manually from a command line and are not available in the user interface. (1779) The Sync options appear in the right-click menu for suspended synchronization profiles but are not functional. (1860) The Suspend Profile button tool tip does not update when switched to Activate Profile. (1900) If a Domino group, which has already been synchronized, is updated with invalid characters in the SMTP Address, there is no warning regarding the invalid characters. (1906) SMART Active Directory Migrator does not copy any device object (workstation or server) Active Directory attributes from Source to Target when the device is migrated. (2086) Directory Sync can only accept user credential with Domain\User or User@Domain.local (User Principle Name) format in the Synchronization Profile. If only the UserName is entered, an error regarding invalid credentials will be received. (4277) There is currently an issue with the samaccountname being updated in the target, if the value (samaccountname in AD or ShortName in Domino) has changed in the source. This issue occurs even if there is a mapping for samaccountname. (4797) SMART DIRECTORY SYNC KNOWN LIMITATIONS 6

7 About Binary Tree Binary Tree is a singularly focused global provider of migration software and solutions for Lotus Notes, Microsoft Exchange, Active Directory, and Windows Server environments. Since 1993, Binary Tree has enabled more than 6,000 customers to migrate more than 30 million users, and facilitated some of the most complex migrations on the planet. Its software solutions are available for migrating from Exchange 2003/2007/2010/2013 and Lotus Notes to onpremises and online versions of Microsoft Exchange, as well as migrations of Active Directory and Windows Server environments. Binary Tree is a Microsoft Gold Partner, an IBM Advanced Business Partner, and is one of Microsoft s preferred vendors for migrating to Microsoft Office 365. The Company is headquartered outside of New York City with offices in London, Paris, Stockholm and Sydney. For more information, visit us at Binary Tree Social Media Resources Copyright 2015, Binary Tree, Inc. All rights reserved. Binary Tree, the Binary Tree logo, the SMART Migration graphics, and any references to SMART Migration and Binary Tree s software products, are trademarks of Binary Tree, Inc. All other trademarks are the trademarks or registered trademarks of their respective rights holders. SMART DIRECTORY SYNC KNOWN LIMITATIONS 7