Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual page 544

About Windows Sync
outbound changes that pertain to synchronized entries. The corresponding
changes are made in the Windows server via LDAP. The server also performs
LDAP search operations against its Windows server peer in order to
synchronize inbound changes made to Windows user entries.
• Password Sync Service. This is an application that must be installed on the
Active Directory machine (or primary domain controller in the case of NT4).
Its purpose is to capture password changes for Windows users and relay
those changes back to the Directory Server via LDAP with SSL, for security.
• NT4 LDAP Service. This is a special LDAP server application that must be
installed on the primary domain controller for NT4 sync. It is only used for
NT4 and is not needed for Active Directory deployments. The purpose of the
NT4 LDAP Service is to provide a similar view of users and groups as is
available via LDAP from Active Directory. This allows almost all of the
Directory Server Windows Sync code to be the same for both Active Directory
and NT4.
NOTE
Figure 18-1 and Figure 18-2 show the relationship between Red Hat Directory
Server and Active Directory and Windows NT4 Server primary domain controller
(PDC), respectively.
544 Red Hat Directory Server Administrator's Guide • May 2005
The term Windows server refers to both Active Directory and NT4
(which assumes that the NT4 LDAP Service is installed). Only where
configuration or behavior is different between Active Directory and
NT4 Server will the type of Windows server be specified.