How to sync Active Directory to an Oracle maintained SQL database

[dfnkt]

Looking for information on how I can drive AD changes by information contained in a SQL database being driven by a feed updated nightly by our Oracle DBA.

Consider this scenario:

John Doe sends an internal email address to addressupdate@ourcompany.com, the email says that he has moved to a new location. The person in charge of changing addresses goes through their process which makes the change in the Oracle DB, which is then synced to my SQL DB. How can I tie this SQL DB to Active Directory so that his address will update in Active Directory.

I've done some research on ADAM (http://www.microsoft.com/windowsserver2003/adam/default.mspx) but I've not been able to decide if this sounds like something that we would be interested in.

Anyone have any experience with this? I do have available a solution from Symantec formerly put out by Transparent Logic called Workflow Solution that would allow me to watch the SQL table and push changes, just not sure where to push the changes..

Update: I may need to look further into ADSI as a way to automate the changes to active directory.

 

[Ferzerp]

You want MS ILM. It's not cheap, but it works.

 

[dfnkt]

You want MS ILM. It's not cheap, but it works.

I did toss together a small proof of concept earlier based on using DSMOD /user

It works like this:

Custom stored procedure iterates my 3,000 rows in the SQL DB searching for a BIT=1 in the CHANGE_FLG column.

If 1 is found in the change_flg, a script is ran on the PDC that uses dsmod /user to make the update.

I have tested this using a temporary DB with 2 records and I was able to push an update into AD. I am wondering now if I need to be using something like ADAM and pushing to it, and then having our heldesk ticketing system pulling user information out of ADAM instead of directly from AD.

 

[daishi5]

I think your best bet for doing this yourself would be through LDAP in some form. I use AutoIT, but I will be honest I don't have the guts to do anything but read from AD. If you have a lot of time, I am sure you could automate a script or program to parse the DB changes, and then import them to your AD through an LDAP query.

You can run LDAP several ways, as I said I use autoIT, MS has some examples with vbscript and from the command line: http://technet.microsoft.com/en-us/library/bb727091.aspx

 

[SpatiallyAware]

I think your best bet for doing this yourself would be through LDAP in some form. I use AutoIT, but I will be honest I don't have the guts to do anything but read from AD. If you have a lot of time, I am sure you could automate a script or program to parse the DB changes, and then import them to your AD through an LDAP query.

You can run LDAP several ways, as I said I use autoIT, MS has some examples with vbscript and from the command line: http://technet.microsoft.com/en-us/library/bb727091.aspx

This.


It goes without saying that you shouldn't test or touch a live environment with this sorta stuff, you'll end up screwing AD.