DirSync service

The RetarusDirSyncService can be controlled via the Windows Services management console (services.msc). It is possible to run the service in the Windows security context LOCAL SYSTEM. However, in order to be able to harden security, it may also be run in the context of a domain user. This user would of course then require the following system privileges:

• Run as a service.

• Add new events to the event log.

• Read/Write permission to the %ProgramData%\Retarus\DirSync directory (or the location specified in the config) and the corresponding LOGS or ARCHIVE sub directories.
  The configuration and log directory can also be specified by the administrator individually. This directory would naturally then require the same file permissions.

• Read permission on the LDAP directory.
  It is possible to specify a domain user to query the directory within the service configuration settings.

The configuration information of the service is stored in an XML file located in the folder of the RetarusDirSync.exe executable file. In the future, it will be possible to create and edit the configuration via the GUI Configuration Editor. As of now, however, the XML file has to be configured by using a text editor. Retarus can assist customer administrators in configuring the configuration file upon request.