Lotus Notes Connector and Directory Synchronization
I am being faced with an interesting issue in regards to exporting Active
Directory objects to Lotus Notes using the Lotus Notes Connector. When I try
to initiate an export I receive the following error in the Application log.
-----------------------------------------
Event Type: Warning
Event Source: MSExchangeADDXA
Event Category: Replication
Event ID: 8340
Date:
Time:
User: N/A
Computer:
Description:
ADC could not replicate CN=EndUser,CN=Users,DC=contoso,DC=com because it is
secured and the connection agreement does not allow secured objects to
replicate.
-----------------------------------------
I have so far been able to determine that this is due to the fact that we
have a single Deny ACE on every object in Active Directory, and therefore
the
connector classifies the object as "secured". This Deny ACE has no
relationship to the permissions necessary to operate the connector, and
there
is no way I can remove the Deny ACE since it has security policy
implications.
What I find puzzling is that:
1) The error message specifically references ADC, and CONNECTION AGREEMENT,
where I am clearly using a CONNECTOR. These are two seperately defined
object
classes in the schema, msExchConnectionAgreement and msExchNotesConnection,
respectively.
2) The available settings of the Lotus Notes Connector does not provide a
means to allowed synchronization of secured objects. However, a Connection
Agreement does through an available setting that translates to an attribute
value in the msExchConnectionAgreement object class; the attribute is
msExchADCOptions.
Here is my question:
First off, has anyone dealt with this particular situation and had a fix?
Assuming no, I would like to then get a professional opinion on the test I
plan to perform.
Basically, since I know that the msExchADCOptions attribute controls whether
to synchronize "secured" objects in the context of a Connection Agreement.
Could this same attribute be added to the msExchNotesConnector object class
and set to the appropriate value in order to therefore control its behavior?
date: Sat, 12 Nov 2005 07:46:47 -0500
author: Jeon Calhoun