Introduction

LDAP Sync Module synchronizes Penrose's directory entries to an external LDAP server. This way you can take advantage of your LDAP server strengths (performance, reliability, scalability, etc.) while utilizing Penrose to provide synchronization services to the mapped data sources.

You can also configure referral on your LDAP server so that all bind, search, and compare operations will be handled by your LDAP server, but all update operations (add, modify, delete, modrdn) will be redirected to Penrose. When Penrose processes those operations, it will update both the LDAP server and the data sources.

Configure Persistent Cache

This feature requres Persistent Cache.

Configure Polling Connector

This feature requres Polling Connector.

Configure Connection

Create a connection to your LDAP server. See Connections.

Configure LDAP Sync Module

Edit PENROSE_SERVER_HOME/conf/modules.xml:

<modules>

  <module name="LDAP Sync">
    <module-class>org.safehaus.penrose.ldap.LDAPSyncModule</module-class>
    <parameter>
      <param-name>connection</param-name>
      <param-value>...</param-value>
    </parameter>
  </module>

</modules>

Specify the name of the LDAP connection you created earlier in the "connection" parameter.

Configure Referral (Optional)

If your LDAP server supports referral, it can be used to redirect update operations to Penrose.

• Sun ONE Directory
• OpenLDAP