Hi everybody, I have the following Scenario: I have to synchronize users in Active Directory with my Fedora Directory considering an organizational tree representing our departments. For example: Active Directory Tree to synchronize: ------------------------------------- ou=Users +ou=IT (users from IT department) +ou=Development (users from Development department) +ou=Security (users from Security department)
Then when I create the Windows Sync Agreement to synchronize ou=Users in ADS with a tree of FDS, lets say ou=Active Directory, with the given configuration: * DS Host: fds.example.com:389 * Windows Host: ads.example.com:636 * DS Subtree: ou=Active Directory,dc=example,dc=com * Windows Subtree: ou=Users,dc=example-ads,dc=com * Replicated Subtree: ou=Active Directory,dc=example,dc=com
The problem I have is that the synchronization process only works when I manually create the Organizational Units manually, but it doesn't seems to be created automatically by the replication process.
The question is: Can FDS deal with OU replication with Active Directory?
Thanks in advance
On Fri, 2007-12-21 at 18:12 -0300, Christian A. Rodriguez wrote:
The question is: Can FDS deal with OU replication with Active Directory?
No. Container objects must be created manually. AD sync will only replicate leaf nodes. This is documented in the AD sync section of the RHDS manual (which is publicly available from the documentation section of the Red Hat web site), and I think on the FDS wiki as well.
-Andrew
389-users@lists.fedoraproject.org