Theodor van Nahl via FreeIPA-users wrote:
Hello,
I do have a running `winsync` setup, which is working for most users. The only thing that
is missing are
* the groups: I've tried to activate the group sync using ldapmodify (setting
`nsds7NewWinGroupSyncEnabled: true`), but the attribute apparently is set to `false`
automatically and I cannot find logs that indicate problems.
How are you trying to set this? I don't know of any active measures to
ensure this is disabled. Be aware that group sync hasn't been tested in
IPA for many years now, probably close to a decade. It may well work
fine but I'd test in a separate environment to be sure first.
* every administrative users: It seems that every user with
`adminCount: 1` on AD is not sync to FreeIPA, but I cannot find any reason for that nor is
anything mentioned in the logs regarding those users.
I can't find this attribute mentioned in either 389-ds or IPA so its
possible the users are being filtered for some other reason. If you flip
this to 0 are you saying they would be synced?
rob
Do you have an idea what's wrong with my configuration or how to get logs that could
indicate the problem?
Best regards,
Theodor van Nahl
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...