Rich, hello and thanks for the quick reply.
 
You write:
 
< Yes, this appears to be a bug in windows sync
 
How might I get further information - is there a BUG number/report ?
Should I try and log a BUG ? If so, where ?
 
Sorry, I'm new to Fedora/Redhat/Linux (migrating off Sun Solaris, so to speak).
 
Anyway, I have the following work-around:
- use the password sync mechanism from Redhat - I've yet to test this - next on my list
- Use a script to do the following:
-- create Directory Server user account
-- create Active Directory account using ldapmodify and  LDAPS
-- set the Active Directory unicodePwd:: using ldapmodify and LDAPS
-- set the Active Directory userAccountControl: 512 using ldapmodify and LDAPS. '512', I believe, 'enables' the account.

Thanks again for your help,
 
Dave (former employee of iPlanet  :-)
------------

> Date: Tue, 2 Dec 2008 08:51:08 -0700
> From: rmeggins@redhat.com
> To: fedora-directory-users@redhat.com
> CC: lambam80@hotmail.com
> Subject: Re: [Fedora-directory-users] 'Account Disabled' Windows Sync Directory Server red cross
>
> lambam80@hotmail.com wrote:
> > Firstly, please accept my apologies for a white lie.
> > I'm, in fact, using CentOS but a colleague of mine recommended that I
> > use this forum/mailing-list.
> >
> > Let me know if this white-lie is a problem.
> >
> > cat /etc/redhat-release
> > CentOS release 5.2 (Final)
> >
> > /usr/sbin/ns-slapd -v
> > CentOS-Directory/8.0.4 B2008.288.1513
> >
> > Windows 2003 Server Standard Edition R2
> >
> > I've 'successfully' configured Windows Sync and it
> > works in both directions.
> >
> > However, accounts that are synched from Centos Directory Server to
> > Active Directory are
> > created with the 'Account Disabled' checkbox selected.
> >
> > In the Windows account administration interface
> > they also have the red cross next to them.
> >
> > Q1. Have other people seen this behavior with Windows Sync ?
> Yes, this appears to be a bug in windows sync
> >
> > Q2. How can I change this behavior and have the
> > windows-accounts enabled from the start ?
> Not sure.
> >
> > Thanks for your time, cheers lambam80
> > Active-Directory Active-Dir Active Dir Active Directory
> > Edit/Delete Message
> > <http://forums.fedoraforum.org/editpost.php?do=editpost&p=1122288>
> >
> > ------------------------------------------------------------------------
> >
> > ------------------------------------------------------------------------
> >
> > ------------------------------------------------------------------------
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>



Win a trip with your 3 best buddies. Enter today.