Filter
Top Products
IBM Tivoli Identity Manager Performance Tuning Guide
Page 11
4 IBM Tivoli Identity Manager adapters
It is sometimes necessary to tune the IBM Tivoli Identity Manager adapters when doing large provisioning
changes or reconciliations. This section should supplement, not supersede, the documentation included
with the adapter.
4.1 Microsoft Active Directory
The Microsoft Active Directory adapter returns attributes to IBM Tivoli Identity Manager that are not
directly retrieved from Active Directory, but rather calculated from other Windows sources. Querying these
external sources can slow down Active Directory reconciliations and can be disabled if these attributes
are not needed.
The Home Directory Security and Mailbox Permissions are two such attributes. Retrieving this information
requires looking up the appropriate access control entry, which is a costly operation. Setting
ReconHomeDirSecurity and ReconMailboxPermissions to FALSE in the adapter registry will disable this
overhead.
Working with Windows Terminal Services (WTS) attributes can slow down provisioning and reconciliation
as well. There are two adapter registry keys that control access to these attributes:
•
WtsEnabled – This key controls the adapters’ access to WTS attributes. If this key is enabled (set
to TRUE) the adapter will have access to provision and reconcile WTS attributes. If this key is
disabled (set to FALSE) the adapter will not provision WTS attributes if requested, nor will it
return them during reconciliation. The default value for this key is FALSE.
•
WtsDisableSearch – This key controls whether the adapter will return WTS attributes during a
reconciliation (a “search” from the adapter’s perspective). If this key is enabled (set to TRUE),
WTS attributes will not be returned in a reconciliation but the attributes will still be updated in
account provisions. If this key is disabled (set to FALSE), WTS attributes will be returned in a
reconciliation. This key only applies if the
WtsEnabled key is set to TRUE. The default value for
this key is TRUE.