I see.  We're aiming at having all users and groups created on the AD side in the first place, so hopefully this will not be an issue.
 
Thanks for the info anyway - we'll take this into account while designing our setup.

 
On 2/5/09, Rich Megginson <rmeggins@redhat.com> wrote:
Kenneth Holter wrote:
Hi. Sorry for the late response.
 They AD-groups are global security groups. We've not quite decided on whether to use existing AD-groups or create new ones aimed at the linux environment.
I don't know if security groups will sync correctly.  When you create a group in DS that you want to sync to AD, it will be created as a distribution group.

 On 1/29/09, *Rich Megginson* <rmeggins@redhat.com <mailto:rmeggins@redhat.com>> wrote:

   Kenneth Holter wrote:

       Hi Rich.
         I haven't worked with the WindowsSync feature much myself,
       so I'm not sure about the group type details your requesting.
       But what we're working on is syncing AD groups over to DS, and
       use the group member information to build our own nis
       netgroups. These netgroups are then used by PAM to
       authenticate users.

   What are the AD groups used for in AD?  Are they Security Groups
   or Distribution Groups or both?  Are they Global or Local (or
   Universal)?  We're just trying to get a sense of what people use
   Groups for on both sides.

                On 1/27/09, *Rich Megginson* <rmeggins@redhat.com
       <mailto:rmeggins@redhat.com> <mailto:rmeggins@redhat.com

       <mailto:rmeggins@redhat.com>>> wrote:

          We're currently investigating the group sync feature of Windows
          Sync, and we wanted to know how it is deployed.  Do you sync
          groups?  What types of groups?  Security or Distribution?
        Global
          or Local?  Do the groups have "meaning" in both AD and
       Fedora DS,
          or only in one side?

          --
          Fedora-directory-users mailing list
          Fedora-directory-users@redhat.com
       <mailto:Fedora-directory-users@redhat.com>
          <mailto:Fedora-directory-users@redhat.com
       <mailto:Fedora-directory-users@redhat.com>>
          https://www.redhat.com/mailman/listinfo/fedora-directory-users



       ------------------------------------------------------------------------

       --
       Fedora-directory-users mailing list
       Fedora-directory-users@redhat.com
       <mailto:Fedora-directory-users@redhat.com>
       https://www.redhat.com/mailman/listinfo/fedora-directory-users
       


   --
   Fedora-directory-users mailing list
   Fedora-directory-users@redhat.com
   <mailto:Fedora-directory-users@redhat.com>
   https://www.redhat.com/mailman/listinfo/fedora-directory-users



------------------------------------------------------------------------

--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
 


--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users