Reconfiguring AD (Domain controller)
AD – OID synchronization is setup
as explained in the document : http://docs.oracle.com/cd/E14571_01/admin.1111/e10031/odip_adm_sync.htm#OIMIG1934
For any
reconfiguration relating to AD such as demoting/renaming etc, the
configuration has to be updated in the following procedure :
- Identify the “HighestCommittedUSN” of the domain controller in use by the enabled synchronization profile. (different replicating domain controllers )
ldapsearch –h –p 389 –D –w
“ –b “” –s base “objectclass=*” highestCommittedUSN
highestCommittedUSN=3537140
- determine the “HighestCommittedUSN” of the domain controller to which it should be reconfigured to
ldapsearch –h
–p 389 –D –w “ –b “” –s base
“objectclass=*” highestCommittedUSN
highestCommittedUSN=31243468
- Disable the current synchronization profile
- Edit the synchronization profile to connect to the appropriate domain controller ( in this example )
- Reset the last applied change number
- Go to the Advanced Tab
- In the section "Additional Configuration
Parameters" edit 'Skip Error To Sync Next Change' and set to true
- Check "Edit and Persist" box, then Change
"Last Change Number" value to a value less than highestCommittedUSN of the new
DC (in this case 31243468)
Save the change
- Enable the synchronization profile
- Monitor synchronization completes without errors
