PasswordSync Agents and Filters
As shown in Figure 22, PasswordSync is a distributed application that requires DirXML® drivers and includes PasswordSync Agents and PasswordSync Filters. Installation of the DirXML drivers is explained in the previous chapter, Setting Up Participating Systems . Agent and filter installation options are discussed in the sections that follow.
Figure 22
PasswordSync Agents and Filters
A PasswordSync Agent can be installed on any Windows 2000/NT server or on any Windows 2000/NT workstation that is continuously available. The computer where the agent is installed must have the latest Novell ClientTM installed.
There is no requirement to place an agent on a controller or on the same computer as Novell® eDirectoryTM or DirXML.
Agents are configured and maintained on the computer where they run, so easy access to the computer, either physically or through terminal services, is one of the most important considerations.
Install PasswordSync Agents on as many computers as necessary to address topology issues and satisfy redundancy requirements for your environment.
PasswordSync Filters must be installed on all domain controllers, even if the domain controllers are already hosting DirXML drivers. Filters can be installed as part of the agent installation or installed separately as changes to your network may require.
Every NT Primary Domain Controller (PDC), every Backup Domain Controller that might be promoted to a PDC, and every Active Directory Domain Controller requires a filter and an association with at least one PasswordSync Agent. The more agents that service a given domain controller, the greater redundancy you achieve.