Integrating the DirXML Driver for Exchange and the DirXML Driver for NT Domain

IMPORTANT:  If you are using the DirXML Driver for NT Domains and the DirXML Driver for Exchange, edit the default policy or create a new one to resolve an account issue between the two drivers. This policy prevents the Exchange driver from attempting to create an NT Domains account before the NT Domains driver creates the account.

The DirXML Driver for NT Domain has a User attribute called DirXML-NTAccountName. This attribute contains the DomainName/UserName value. The Exchange MailBox object needs the value to associate to a domain account. For that association to occur correctly, the value in DirXML-NTAccountName needs to be put in the MailBox attribute Assoc-NT-Account. Keep in mind that attribute names are case sensitive.

  1. Create a new policy so that a new MailBox object isn't created unless the DirXML-NTAccountName attribute is populated.

    1. In iManager, select DirXML Management > Overview.

    2. Search for the driver set that contains the DirXML Driver for Exchange, then select that driver.

    3. Select the Creation Policies object on the Subscriber channel.


      The Creation Policies object

    4. In the Creation Policies dialog box, click Edit.


      The Creation Policies dialog box

    5. Click User Required Attributes.


      The User-Required Attributes check box

    6. In the Actions section, add an action for the DirXML-NTAccountName attribute.

      Click the + icon, then select Veto If Operation Attribute Not Available from the Do drop-down list.


      The + icon and Do edit box

      Select DirXML-NTAccountName from the Enter Name drop-down list.


      The Enter Name edit box

    7. Click OK.

      As the following figure illustrates, the action is placed in the User Required Attributes section.


      Actions in the User-Required Attributes section

  2. Verify that the DirXML-NTAccountName attribute is in the following locations:

  3. Synchronize the Subscriber channel.


    The Synchronize radio button

  4. Restart both drivers.

After you have made these changes to the drivers, the following control flow occurs when you create a user in eDirectory:

  1. The DirXML Driver for NT Domain is handed a create request.
  2. The DirXML Driver for Exchange Create event is vetoed because of the absence of the DirXML-NTAccountName attribute.
  3. The DirXML Driver for NT Domain creates the NT account and publishes the name of the NT account just created to the DirXML-NTAccountName attribute.
  4. The DirXML Driver for Exchange is notified. It creates the mailbox and associates the mailbox with the NT account information stored in eDirectory.

NOTE:  The examples used DirXML-NTAccountName as the eDirectory attribute to hold the NT account information, but you can choose any attribute that works for you.