A.D.A.M or AD LDS

Here is my AdamSync config using the ProxyUser class. It took me a while to get everything going right but it works and after a full sync the incremental syncs take less than 30 seconds.

We do not sync our entire AD partition only a subset. After alot of reading objectCategory is better then objectClass because objectCategory is indexed in AD.

<br /> <?xml version="1.0"?><br /> <doc><br /> <configuration><br /> <description>Adam-Sync</description><br /> <security-mode>object</security-mode><source-ad-name>my.domain</source-ad-name><source-ad-partition>dc=my,dc=domain</source-ad-partition><source-ad-account>user_account</source-ad-account><br /> <account-domain>my.domain</account-domain><br /> <target-dn>dc=my,dc=domain</target-dn><br /> <query><br /> <base-dn>ou=SubOU,dc=my,dc=domain</base-dn><br /> <object-filter>(|(objectCategory=person)(objectCategory=group)(objectCategory=organizationalUnit))</object-filter><br /> <attributes><br /> <include>objectSID</include><br /> <include>mail</include><br /> <exclude></exclude><br /> </attributes><br /> </query><br /> <user-proxy><source-object-class>user</source-object-class><br /> <target-object-class>userProxy</target-object-class><br /> </user-proxy><br /> <schedule><br /> <aging><br /> <frequency>0</frequency><br /> <num-objects>0</num-objects><br /> </aging><br /> <schtasks-cmd></schtasks-cmd><br /> </schedule><br /> </configuration><br /> <synchronizer-state><br /> <dirsync-cookie></dirsync-cookie><br /> <status></status><br /> <authoritative-adam-instance></authoritative-adam-instance><br /> <configuration-file-guid></configuration-file-guid><br /> <last-sync-attempt-time></last-sync-attempt-time><br /> <last-sync-success-time></last-sync-success-time><br /> <last-sync-error-time></last-sync-error-time><br /> <last-sync-error-string></last-sync-error-string><br /> <consecutive-sync-failures></consecutive-sync-failures><br /> <user-credentials></user-credentials><br /> <runs-since-last-object-update></runs-since-last-object-update><br /> <runs-since-last-full-sync></runs-since-last-full-sync><br /> </synchronizer-state><br /> </doc><br />