How to synchronize ACF2 LDS LogonIDs, and Other attributes to Microsoft AD

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

When there is an LDS connection between ACF2 and Microsoft AD server, but no attributes are being picked up by the Microsoft AD server. What is needed to make ACF2 and Microsoft AD synchronize? For example, map the ACF2 LID attributes name, phone to the Mircosoft AD system?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

In order to ensure that attributes are synchronized first check that the ACF2 object class and the Microsoft AD object are equal.

SYS1 / LDAP.ABC LAST CHANGED BY ABCXYZ ON 11/08/19-12:35

ACTIVE ADMINDN(acf2) APPLNAME() BITDEFLT(CHARACTER/YN) NOBROADCST CHANGE CODEPAGE() DATEFMT(MMDDYYYY) DEBUG NODELCHILD DELETE INSERT JOURNAL LDSLABEL() NEXTKEY(ABC) OBJCLASS(USER) PSWDASIS NOPSWDLOWR URL(LDAP://###.###.##.###:nnn) NOUSEEXTOP USERDNS(CN=%L,OU=ACF2USERS,DC=ABC,DC=DEF) XREF(NAME/displayName)

 

If the OBJCLASS is correct, ensure that the ACF2 attribute and Microsoft AD attribute(s) are correct in the LDAP record and the XREFLDAP record.

 

SYS1 / LDAP.ABC LAST CHANGED BY ABCXYZ ON 11/08/19-12:35

ACTIVE ADMINDN(acf2) APPLNAME() BITDEFLT(CHARACTER/YN) NOBROADCST CHANGE CODEPAGE() DATEFMT(MMDDYYYY) DEBUG NODELCHILD DELETE INSERT JOURNAL LDSLABEL() NEXTKEY(ABC) OBJCLASS(user) PSWDASIS NOPSWDLOWR URL(LDAP://###.###.##.###:nnn) NOUSEEXTOP USERDNS(CN=%L,OU=ACF2USERS,DC=ABC,DC=DEF) XREF(NAME/displayName)

 

 SYS1 / XREFLDAP.ABC LAST CHANGED BY ABCXYZ ON 11/08/19-10:33            
                      NEXTKEY() XREF(PHONE/telephoneNumber)  

 

If either of the attributes does not exist the information will not be filled in.