Bart's Weblog

Just a blog…

Archive for the ‘Symantec’ Category

Schemus Active Directory synchronisation tool

Posted by bartvdw on 2121/0505/2015

Recently had some questions in regards to the Schemus tool, which is a tool used to synchronize Active Directory information to cloud services, such as Symantec, Websense, etc. and I wanted to share that specific information.

Before you begin, it’s interesting to know:
& = AND
| = OR
! = NOT

If you use if to synchronize email addresses, you have the option to define the OU’s where to look for users if your AD is segmented accordingly, but the problem can be if both users and mail-enabled user reside in the same OU. To overcome that problem (as in: let’s exclude mail-enabled users), add this to the search filter: (!(msExchRecipientTypeDetails=128))

Full example: (|(&(objectCategory=person)(objectClass=user)(!(msExchRecipientTypeDetails=128)))(objectCategory=group))

(add objectCategory definitions if required, such as distribution groups, public folders, …)

Another thing that can cause troubles is that by default the tool uses %mail% variable to look up the primary email address, however that attribute is not maintained by Exchange, it’s an AD attribute and therefor it can have any value, even empty. That means that if the person who creates users must fill in that attribute correctly or you will have issues. To overcome that, change the Primary Mail attribute to following value: %proxyAddresses{s/(SMTP:|.*:.*)(.*)/$2/}%

By defining ‘SMTP’ (uppercase), we indicate we want the primary email address, the line Mail Aliases defines the same string, but with ‘smtp’ lowercase.

For Websense it can be difficult to synchronize users that have no mailbox or email address (ex. web filtering service, for authentication), in that case change the Primary Mail string to %userPrincipleName% as that should exist and filled in correctly.

msExchRecipientTypeDetails AD values:


Posted in Active Directory, Schemus, Symantec, Websense | Leave a Comment »

Symantec: General availability Backup Exec 2012 SP2 & Backup Exec 2010 SP3

Posted by bartvdw on 2626/0707/2013

Backup Exec 2010 R3 revision 5204 Service Pack 3 Release Notes

Backup Exec 2010 R3 revision 5204 Service Pack 3

Backup Exec 2012 revision 1798 Service Pack 2 Release Notes

Backup Exec 2012 revision 1798 Service Pack 2

Posted in Backup Exec 2010, Backup Exec 2012, Symantec | Leave a Comment »

Backup Exec 2012 Upgrade Update

Posted by bartvdw on 0707/0808/2012

Posted in Backup Exec, Symantec | Leave a Comment »

Symantec Backup Exec and Linux Agents

Posted by bartvdw on 0606/0808/2012

About installing the Agent for Linux

Step by step installation of the Backup Exec Remote Agent for Linux and UNIX Servers (RALUS) on the Red Hat Linux platform

How to install the Symantec Backup Exec Agent for Unix (Legacy Agent) from a Backup Exec Installation CD-ROM

Best practices for Backup Exec 2012 Agent for Linux

Posted in Backup Exec, Linux, Symantec | 1 Comment »