Google Apps Directory Sync Administration Guide - Manual (Page 80)

80 Release 4.0.2
Family Name Attribute(s) An LDAP attribute that contains each user’s
family name. (In the English language, this is
usually the last name.)
This is synchronized with the user’s name in
Google Apps.
Examples: surname,[cn]-[ou]
Synchronize Passwords Indicates which passwords Directory Sync will
synchronize.
Options are:
• Only for new users: When Directory Sync
creates a new user, it synchronizes that
user’s password. Existing passwords are
not synced. Use this option if you want
your users to manage their passwords in
Google Apps.
Note: If you are using a temporary or one-
time password for new users, use this
option.
• For new and existing users: Directory
Sync always synchronizes all user
passwords. Existing passwords on Google
Apps are overwritten. This option is
appropriate for managing user passwords
on your LDAP server, but it is less efficient
than the Only changed passwords
option.
• Only changed passwords: Directory
Sync only synchronizes passwords that
have changed since your previous sync.
This option is recommended if you want to
manage user passwords on your LDAP
server.
Note: If you use this option, you must also
provide a value for the Password
Changed Time Attribute.
Example: Only for new users
LDAP Extended Attribute
Setting
Description