MACROMEDIA BREEZE-USING THE MACROMEDIA BREEZE MANAGER Manual do Utilizador descarregar pdf (Página 18)

18 Best Practice for Breeze Directory Service Integration

Setting the password to an LDAP attribute

Under this scenario, DSI would set the initial password of imported users to the value of an

attribute in the directory entry for that user. For example, if the LDAP directory contains the

employee ID number as a field, you could set the initial password for users to their employee

ID number. After users log in using this initial password, they can change their passwords.

Recommended practices for

synchronization

An administrator can initiate two different kinds of synchronization of Breeze with the

external LDAP directory:

■ A manual synchronization that immediately synchronizes the Breeze directory with the

organization’s LDAP directory.

■ Scheduled synchronization that takes place at defined intervals.

Some directory servers have limits on the number of entries that can be imported with a single

query. If you cannot remove this limit or do not want to remove the limit due to directory

server performance issues, you can work around the limit by separately synchronizing to the

various branches that make up the directory tree for your organization. Paging—packaging

multiple queries into one request—is not supported by Breeze DSI. Another solution for

limits on directory request size for the Active Directory is to increase the page size. But this

might have an adverse impact on directory server performance.

Macromedia recommends the following practices for synchronization.

Scheduling synchronizations

An initial synchronization of the Breeze directory with the external LDAP directory might

consume significant resources if you are importing a large number of users and groups. If this

is the case, Macromedia recommends that you do the initial synchronization at an off-peak

time, such as late at night. You may also want to do the initial synchronization manually.

You could do all of the subsequent synchronizations manually also, but the recommended

practice is to use scheduled synchronizations to ensure that Breeze has an up-to-date picture

of the users and groups imported from the organization’s LDAP directory service. You use the

Schedule Settings screen (shown below) to set this up.

1 2 ... 13 14 15 16 17 18 19 20 21 22 23 24

Sem comentários

MACROMEDIA BREEZE-USING THE MACROMEDIA BREEZE MANAGER Manual do Utilizador Página 18