Howdy,
I am running FDS 1.0.1 and am syncing with AD on Win2003. All is well. I have a question about the way that 2 sync agreements would work. We are syncing the People OU, but our groups are in a sibling OU in AD, and are not synced. If I setup a second agreement for the groups, with the group membership be synchronized correctly? I guesss I am asking if the group membership needs to be synced using the same agreement that syncs the users.
Daniel Shackelford wrote:
I am running FDS 1.0.1 and am syncing with AD on Win2003. All is well. I have a question about the way that 2 sync agreements would work. We are syncing the People OU, but our groups are in a sibling OU in AD, and are not synced. If I setup a second agreement for the groups, with the group membership be synchronized correctly? I guesss I am asking if the group membership needs to be synced using the same agreement that syncs the users.
A bit late : holiday season etc... Anyway the answer is that two agreements should be ok in this scenario. Where you will run into trouble with multiple agreements is if you try to sync users in the _same_ subtree using two or more agreements. That will lead to strange results.
389-users@lists.fedoraproject.org