I see. We're aiming at having all users and groups created on the AD side in the first place, so hopefully this will not be an issue. Thanks for the info anyway - we'll take this into account while designing our setup. On 2/5/09, Rich Megginson <rmeggins at redhat.com> wrote: > > Kenneth Holter wrote: > >> Hi. Sorry for the late response. >> They AD-groups are global security groups. We've not quite decided on >> whether to use existing AD-groups or create new ones aimed at the linux >> environment. >> > I don't know if security groups will sync correctly. When you create a > group in DS that you want to sync to AD, it will be created as a > distribution group. > >> >> On 1/29/09, *Rich Megginson* <rmeggins at redhat.com <mailto: >> rmeggins at redhat.com>> wrote: >> >> Kenneth Holter wrote: >> >> Hi Rich. >> I haven't worked with the WindowsSync feature much myself, >> so I'm not sure about the group type details your requesting. >> But what we're working on is syncing AD groups over to DS, and >> use the group member information to build our own nis >> netgroups. These netgroups are then used by PAM to >> authenticate users. >> >> What are the AD groups used for in AD? Are they Security Groups >> or Distribution Groups or both? Are they Global or Local (or >> Universal)? We're just trying to get a sense of what people use >> Groups for on both sides. >> >> On 1/27/09, *Rich Megginson* <rmeggins at redhat.com >> <mailto:rmeggins at redhat.com> <mailto:rmeggins at redhat.com >> <mailto:rmeggins at redhat.com>>> wrote: >> >> We're currently investigating the group sync feature of Windows >> Sync, and we wanted to know how it is deployed. Do you sync >> groups? What types of groups? Security or Distribution? >> Global >> or Local? Do the groups have "meaning" in both AD and >> Fedora DS, >> or only in one side? >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users at redhat.com >> <mailto:Fedora-directory-users at redhat.com> >> <mailto:Fedora-directory-users at redhat.com >> <mailto:Fedora-directory-users at redhat.com>> >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> >> >> >> ------------------------------------------------------------------------ >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users at redhat.com >> <mailto:Fedora-directory-users at redhat.com> >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users at redhat.com >> <mailto:Fedora-directory-users at redhat.com> >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> >> >> ------------------------------------------------------------------------ >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users at redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20090206/79732c1a/attachment.html
