>From my tests, no.  OU's have to created and deleted manually in 389.  For passwords, they have to be reset in AD since only passsync can pick them up.  You can replicate any OU, just create the sub containers first and initiate a full resynchronization.





On Mon, Jun 27, 2011 at 4:16 PM, solarflow99 <solarflow99@gmail.com> wrote:


On Mon, Jun 27, 2011 at 4:08 PM, Mi Zhou <mi.zhou@stjude.org> wrote:
Thanks Rich for the answer. A few more questions:

Does existing password get synced during the initial full
re-sychronization? or does it only sync changes?

Does container entries got synced as well? Say, if a new OU was created
on AD, will that be synced on 389?