Configuring Directory Synchronization between Novell GroupWise and Exchange Server 2003

After you configure Connector for Novell GroupWise, you can synchronize directories between Novell GroupWise and Exchange 2003 (Active Directory). When directories are synchronized, both Novell GroupWise and Exchange 2003 users can select each other in the Exchange address book or the Novell GroupWise directory, and send messages to each other as if they belong to the same messaging environment. Before configuring directory synchronization, ensure that message transfer using Connector for Novell GroupWise was tested successfully.

You must complete the following steps to configure directory synchronization with Novell GroupWise:

1. Specify an import container for Novell GroupWise recipients   The import container is the target organizational unit in Active Directory where Connector for Novell GroupWise places the recipient objects that are created during directory synchronization for Novell GroupWise users. It is a good idea to create a dedicated organizational unit for this purpose in Active Directory Users and Computers before configuring directory synchronization. There can only be one import container.

   Note

   If you change the import container at a later time, remember to move affected recipient objects to the new organizational unit to make sure that they are updated properly.

   You also can specify the types of recipient objects to create in Active Directory if replicated mailboxes do not have accounts in the Windows domain (using the Create A Disabled Windows User Account, Create A New Windows User Account, and Create A Windows Contact options on the Import tab in the connector properties). Furthermore, you can select which Novell GroupWise recipients to include in directory synchronization. The default Import All Directory Entries option imports all addresses in the specified organizational unit. The remaining options allow you to restrict the address information, in which case you can define corresponding import filters. For example, you can specify GWDOMAIN.*.* in an import filter to prevent the import of GroupWise recipient objects that reside in a GroupWise domain called GWDOMAIN.

   Note

   You must grant the computer account of your Exchange 2003 server permission to create and modify recipients in the selected import container. This is necessary for directory synchronization from Novell GroupWise to Exchange 2003 to work. Exchange System Manager can configure the computer account with the required permissions automatically for you when you configure Connector for Novell GroupWise.

2. Specify which Exchange recipients to export to Novell GroupWise   An export container is an organizational unit in Active Directory that Connector for Novell GroupWise uses to export Exchange recipient objects to the Novell GroupWise directory. You can specify multiple export containers in the Connector for Novell GroupWise configuration. Nested organizational units are not selected for export if you select the parent organizational unit. You must select each organizational unit individually.

   In addition to selecting export containers, you can decide whether to export contact and groups to Novell GroupWise. Groups appear as user objects in the GroupWise target directories. Membership information is not synchronized. For this reason, you need to enable the distribution list expansion feature of the API Gateway, which is only supported if you installed the Novell GroupWise Patch 2 for API NetWare Loadable Module (NLM), as explained earlier. For a discussion of the advantages and disadvantages of synchronizing group objects, see Understanding Interoperability and Migration in Exchange Server 2003.

   Note

   You must grant the computer account of your Exchange 2003 server permission to access and read recipient information in the selected export containers. This is necessary for directory synchronization from Exchange 2003 to Novell GroupWise to work. Exchange System Manager can automatically configure the computer account with the required permissions when you configure Connector for Novell GroupWise.

3. Configure a directory synchronization schedule   Directory synchronization can require that large amounts of data be processed through Connector for Novell GroupWise, which can slow message traffic throughput during synchronization cycles. For this reason, schedule synchronization during off-peak traffic hours. If your directory information changes infrequently, synchronization once a day might be sufficient. Otherwise, schedule synchronization for two or more times a day. You can specify the directory synchronization schedule on the connector's Dirsync Schedule tab.

4. Test directory synchronization   You should start the first directory synchronization cycle manually to verify that Connector for Novell GroupWise is configured correctly and that the directories synchronize.

   On the connector's Dirsync Schedule tab:

   1. Under Exchange to GroupWise directory synchronization, click Immediate full reload. A pop-up message indicates that directory synchronization has begun. This process synchronizes directory objects from Active Directory to the Novell GroupWise directory.

   2. Under GroupWise to Exchange directory synchronization, click Immediate full reload. Again, a pop-up message indicates that directory synchronization has begun. This process synchronizes directory objects from Novell GroupWise to Active Directory.

   Allow a few minutes for synchronization to finish. Then check Active Directory to verify whether the Novell GroupWise users and objects have been added. Also, check the Novell GroupWise directory to ensure that users and objects have been added there for the external foreign domain that refers to the Exchange 2003 organization. If the directories are not updated, an error occurred. The following list provides some general troubleshooting tips. For more troubleshooting guidelines, see Troubleshooting Interoperability and Migration Issues in Exchange Server 2003.

   • Verify that your Exchange server has been updated to Exchange Server Service Pack 1.

   • Verify connectivity between the Exchange server with Connector for Novell GroupWise and the bridgehead server running the API Gateway. To do this, you can stop the Connector for Novell GroupWise on the Exchange server and the API Gateway NetWare Loadable Module (NLM) on the Novell NetWare server, and then open the API Gateway directory in Windows Explorer. Verify that you can save and read text files in the API Gateway directory. Delete your test files before you restart the API Gateway and Connector for Novell GroupWise.

   • Verify the configuration of Novell GroupWise and the Exchange 2003 server. Verify that you configured everything correctly in the previous configuration steps. Specifically, check the names of the external foreign domain, the API Gateway, and the path to the API Gateway directory in Novell NetWare Administrator, and verify that the configuration parameters of Connector for Novell GroupWise correspond in Exchange System Manager. Most synchronization issues are the result of configuration problems.

   • Check Event Viewer on the Exchange 2003 server for any errors in the application log. These might help you to determine at what point the problem occurred. Also check the logs and console on the server running the Novell GroupWise API Gateway for any errors.

If your synchronization is successful, you will find the recipient objects in the Novell GroupWise directory and Active Directory. Users on both servers can now interact as if they are members of the same messaging environment. The next step is to enable users on both servers to access each other's free/busy information.