Google Postini Directory Sync Configuration Guide - Manual (Page 11)

Microsoft Active Directory 11
Microsoft Active Directory
Chapter 3
Directory Sync with Microsoft Active Directory
Microsoft Active Directory is an LDAP based directory which holds organizational
information, and is often used with Microsoft Exchange. If you are using Active
Directory 2000 or 2003, Directory Sync can collect this information. Allowing this
connection requires setting up SSL and DSML in your environment.
DSML (Directory Services Markup Language) allows an HTTP session to use
SOAP to access Active Directory. DSFW runs as a module on a server running
Internet Information Services (IIS) version 5.0 or later. It uses SOAP over HTTP to
transmit and receive directory requests from client computers. Directory Sync acts
as a client sending DSML requests to the customer server to query the users in
the customer’s Active Directory.
Setting up Directory Sync with Microsoft Active Directory consists of six steps:
1. Install Prerequisite Tools.
2. Install and Enable DSML.
3. Set Up an SSL Certificate.
4. Enable SSL.
5. Adjust Server Settings.
6. Collect Information for Directory Sync setup.
Install Prerequisite Tools
You’ll need to install several components before you’ll be able to install DSML and
SSL on your server. This includes IIS, MSXML and the .NET Framework Runtime
Library. Download and install all of these components, using the instructions
below.