DIGITAL Digital Equipment Corporation Enterprise Messaging Services Fact Sheet ------------------------------------------- Digital X.500 Directory Synchronizer Release 1.4-2 Description Digital X.500 Directory Synchronizer (Synchronizer-500 or XDSU) is a software application that allows the creation of a true enterprise-wide directory service. Synchronizer-500 is a full- featured management Directory User Agent (DUA) which enables the automated and bi-directional exchange of electronic direc- tory information in a multivendor environment. Synchronizer-500 supports the X.500 Directory Information Tree (DIT) structure suggested in Annex B of the X.521 Recommendations with customiz- able extensions which are designed specifically for use in a multivendor electronic mail network. Synchronizer-500 accepts formatted directory "feeds" from other directory databases. These feeds represent a snapshot of the current contents of the directory information to be included in the enterprise-wide directory service. Synchronizer-500 normalizes the directory information and loads (or updates) the appropriate records in Digital's implementation of the CCITT X.500 Directory Information Base (DIB). Likewise, Synchronizer- 500 can extract information from all-or a designated subset-of the X.500 DIB and create export feeds in a format compatible January, 1998 Fact Sheet Rev 1.4-2 1 with non-X.500 directory databases. Complete export loads or just recent changes to the X.500 DIB can be created. Synchronizer-500 provides the directory administrator with complete control over not only the information being exchanged, but also over how and when the synchronization process occurs. This can be of particular importance when processing input feeds or generating updates to time-critical directories and Human Resource databases. For purposes of synchronizing electronic mail directories, Synchronizer-500 and the Digital X.500 Directory Service form the centerpiece of a powerful multivendor mail network. Using Synchronizer-500, bi-directional synchronization can be achieved between X.500 and electronic mail directories such as: Digi- tal MAILbus/Distributed Directory Service (DDS), IBM PROFS or OfficeVision, Microsoft Mail, cc:Mail, UNIX Sendmail, and ALL- IN-1. Support for additional custom, legacy, and newly emerging directory products can be accomodated using Synchronizer-500's customizable configuration files. Features o Synchronizer-500 is a powerful tool that enables bi- directional synchronization between X.500 and virtually ANY other directory to create a true multivendor enterprise-wide directory service. o The Import feature loads X.500 with information from vir- tually any existing directory or other source of infor- mation, such as an electronic mail address list or Human Resources system. Incoming information in various formats is mapped into X.500 by using flexible configuration files. Synchronizer-500 allows for initial bulk-loading of directory information, as well as ongoing synchronization maintenance. January, 1998 Fact Sheet Rev 1.4-2 2 o The Export feature uses highly-flexible configuration files that permit the extracted directory information to be tai- lored into a form ready for use by the receiving directory. It allows an extract of the full directory, a subset of the directory (based on Directory Group ID or selected X.500 attributes), or only the recent changes. Extracts can be for- matted specifically for the target directory database being updated. o Extensive support is provided by Synchronizer-500 for use in the creation of a multivendor electronic mail addressing database. One such feature which is supported in directory import mode is the automatic creation of user-friendly nick- names. This makes synchronization with PC LAN electronic mail address lists easier. Once created, user nicknames are stored in X.500 along with the other descriptive information. This information is then made available for use in PC LAN elec- tronic mail "pick" screens thereby presenting end users with friendly addressing schemes. o With Synchronizer-500, virtually any directory can be syn- chronized with X.500 through the use of site-specific Record Description Files (RDFs). Administration can be performed in a centralized manner or be distributed throughout the en- terprise thereby taking full advantage of the distributed processing capabilities designed into the X.500 standards. o During the import process, RDFs define the directory file format and map this information appropriately into X.500. The import directory feed need only be a sequential file in fixed format. During the export process, RDFs allow the exported information to be put into the exact format needed by the receiving directory system. o Synchronizer-500 tags all entries with a unique Directory Group ID (Group ID), which is assigned by the X.500 directory administrator. Use of Group IDs simplifies identification, maintenance and reporting functions. It is especially use- ful with the export feature because it allows the directory January, 1998 Fact Sheet Rev 1.4-2 3 administrator to specify which portions of the X.500 direc- tory to extract. A Group ID attribute is associated with each entry in the X.500 database being managed by Synchronizer- 500. The actual attribute used to contain this information is selected by the directory administrator. January, 1998 Fact Sheet Rev 1.4-2 4 In addition, Synchronizer-500 includes several features that specifically support import and export synchronization of elec- tronic mail directory information. These features are: Import Synchronization o Provides capability to initially bulk-load directory in- formation into X.500 which simplifies and reduces what was previously a tedious, manual maintenance effort. o Can create superior entries in the X.500 Directory System Agent (DSA) naming context. o Allows each entry in the X.500 DIB to contain an unlimited number of electronic mail address aliases per user. Each address alias can optionally be checked for uniqueness within the X.500 DIB. o Automatically generates the mail aliases needed to communi- cate within an IBM PROFS or SNADS environment. o Ensures the integrity of the enterprise directory by per- forming uniqueness checks on user CCITT X.400 1984 Form 1 Variant 1 style and 1988 mnemonic Originator/Recipient (O/R) Addresses, thereby preventing address duplication. o Includes the option to create a unique, system-wide nickname in X.500 for each entry. Export Synchronization January, 1998 Fact Sheet Rev 1.4-2 5 o Allows the directory administrator to select whether all, or only specialized subsets of the directory information is exported. Options available include: - full directory export - selective export (subset selectable via Group ID(s) or other X.500 attributes from the specified search context) - changes only (export only the entries changed during the synchronization session. This is useful when synchronizing with populations that may not be capable of processing complete directory updates on a regular basis) o Creates export directory files in a ready-to-use format. Record Description Files (RDF) o Permits the directory administrator to supply default values for any field in the RDF. This is a useful feature when all users in a directory or Group ID share the same information, (e.g., Department Name). o Includes example import and export RDFs to use in synchro- nization operations with Microsoft Mail, a UNIX Sendmail alias table, a Message Router/DDS network (Version 3.2), and a PROFS/OfficeVision import. (Additional RDFs can easily be created for virtually any directory environment). o Allows complex conditional logic to be applied in import and export RDFs-an important feature which permits the ability to check the value of data in fields and allows for conditional processing based on the results of this check. Conditional operators include "equal to", "not equal to", "exists", "does not exist", "is a substring of", and "is not a substring of". Additionally, conditional logic on multiple fields can be combined (using "or", "and", and "not" operators) to determine the values to place into fields. January, 1998 Fact Sheet Rev 1.4-2 6 o Allows input and output file filtering, which provides the ability to ignore certain records depending on a condition. This can be especially useful when using IMPORT mode since the foreign directory input file contains a full dump of a foreign directory which may contain records which are "local" and should not be synchronized. Management o Supports the X.500 attributes listed in the Digital X.500 Directory Synchronizer Configuration and Management Guide. Support for additional attributes is provided by customiza- tion of the Synchronizer-500 layout file. o Synchronizes a virtually unlimited number of directory files simultaneously, with no upper limit on the number of Group IDs that can be stored within X.500 o Allows Synchronizer-500's file names and directory loca- tions to be changed to suit to your environment's unique requirements o Provides import transaction logging, including: - Full logging (optional), when it is important to capture an exact account of the transaction updates to X.500 - Condensed logging, listing start- and end-processing times, and the entry's transaction type (ADD, MODIFY, or DELETE), distinguished name, and status (SUCCESS or FAILED) - Transaction statistics summary reporting at processing completion, listing start- and end-processing times for each Group ID, the total number of transactions processed, and the number of successful ADDs, MODIFYs, DELETEs, and FAILs January, 1998 Fact Sheet Rev 1.4-2 7 o Permits invocation of an external command procedure (script) that can be used to execute notification, clean-up, and post- processing operations at selected intervals and at the end of a Synchronizer-500 run. o Can notify the directory administrator, via electronic mail, of the status of Synchronizer-500 runs by providing a copy of the Transaction Statistics Summary Report. January, 1998 Fact Sheet Rev 1.4-2 8 Enterprise Messaging Services Digital Software Integration services are available to assist you in implementing Synchronizer-500. These consulting services are designed to help ensure a smooth rollout of this technology within your enterprise. For more information on Digital Software Integration services, contact your local Digital office. Software Licensing This software is furnished under the licensing provisions of Digital Equipment Corporation's Standard Terms and Conditions. For more information about Digital's licensing terms and poli- cies, contact your local Digital office. License Management Facility Support Digital X.500 Directory Synchronizer supports the OpenVMS and Digital UNIX License Management Facility. For more information on the License Management Facility refer to the appropriate Software Product Description or documentation. Warranty The Digital X.500 Directory Synchronizer software is warranted to conform to this Digital X.500 Directory Synchronizer En- terprise Messaging Service Fact Sheet. This means that Digital will remedy any nonconformance when it is reported to Digital in writing by the Customer during the warranty period. The Warranty period is ninety (90) days. It begins when the software is in- stalled or thirty days after delivery to the end user, whichever occurs first, and expires 90 days later. January, 1998 Fact Sheet Rev 1.4-2 9 Optional Extended Warranty, providing functionality enhancement updates during the period of coverage, is also offered. Telephone support is available. Media and Documentation Digital X.500 Directory Synchronizer software is supplied on TK50 or TLZ06 distribution media. The following documentation is also included: Digital X.500 Directory Synchronizer Installing on an OpenVMS System or Digital X.500 Directory Synchronizer Installing on a Digital Unix System Digital X.500 Directory Synchronizer Configuration and Man- agement Guide Software Requirements The following Digital software products must be installed and operational prior to installation of Digital X.500 Directory Synchronizer: For OpenVMS Systems: o OpenVMS VAX or OpenVMS AXP Operating System o DECnet/OSI for OpenVMS o Digital X.500 Directory Service January, 1998 Fact Sheet Rev 1.4-2 10 For Digital UNIX Systems: o Digital UNIX Operating System o DECnet/OSI for Digital UNIX o Digital X.500 Directory Service Optional Software Customers may choose how directory files are transported between the Digital and non-Digital platforms. Electronic mail is one example of how the files can be moved. Other transport examples include: o DECnet/OSI o TCP/IP-FTP o DECnet/SNA Data Transfer Facility o DECnet/SNA VMS Remote Job Entry o VAX FTAM o PATHWORKS or other file sharing network operating system Minimum Hardware Required The minimum hardware required for Synchronizer-500 are listed in Software Product Description for Digital X.500 Directory Service, SPD #40.77.00. January, 1998 Fact Sheet Rev 1.4-2 11 Minimum Disk Space Required Synchronizer-500 requires a minimum of 1000 blocks on OpenVMS or 1.0 Mbytes on Digital UNIX NOTE See the Digital X.500 Directory Synchronizer Configuration and Management Guide for instructions on how to estimate the amount of disk space required during a Synchronizer- 500 run. This estimate varies depending upon the size and number of files being processed. These disk space require- ments are in addition to the disk allocation requirements listed above. More Information For more information about Digital X.500 Directory Synchronizer or any other Digital Enterprise Messaging Service, contact your local Digital sales representative. Trademarks The following trademarks are registered by Digital Equipment Corporation: DIGITAL ALL-IN-1 AXP DECnet MAILbus MAILbus 400 Message Router VAX VAX DOCUMENT January, 1998 Fact Sheet Rev 1.4-2 12 OpenVMS The following are third-party trademarks: cc:Mail is a registered trademark of Lotus Corporation Microsoft Mail is a registered trademark of Microsoft Corpo- ration OfficeVision is a registered trademark of International Business Machine Corporation (IBM) PROFS is a registered trademark of International Business Machine Corporation (IBM) SNADS is a registered trademark of International Business Machine Corporation (IBM) UNIX is a registered trademark of UNIX System Laboratories Printed in the U.S.A. Copyright © 1998 Digital Equipment Corporation. All rights reserved. January, 1998 Fact Sheet Rev 1.4-2 13