Theodor van Nahl via FreeIPA-users wrote:
Hello,
I do have a running `winsync` setup, which is working for most users. The only thing that is missing are
- the groups: I've tried to activate the group sync using ldapmodify (setting `nsds7NewWinGroupSyncEnabled: true`), but the attribute apparently is set to `false` automatically and I cannot find logs that indicate problems.
How are you trying to set this? I don't know of any active measures to ensure this is disabled. Be aware that group sync hasn't been tested in IPA for many years now, probably close to a decade. It may well work fine but I'd test in a separate environment to be sure first.
- every administrative users: It seems that every user with `adminCount: 1` on AD is not sync to FreeIPA, but I cannot find any reason for that nor is anything mentioned in the logs regarding those users.
I can't find this attribute mentioned in either 389-ds or IPA so its possible the users are being filtered for some other reason. If you flip this to 0 are you saying they would be synced?
rob
Do you have an idea what's wrong with my configuration or how to get logs that could indicate the problem?
Best regards, Theodor van Nahl _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...