Re: Directory Server - sync DS-AD

[Rich Megginson <rmeggins@xxxxxxxxxx>]

On 05/14/2013 01:34 PM, Denise Cosso wrote:

Description of problem:
In the Directory Console, when you click on user that was synced 
from Directory Server, and open the properties page, if you click 
on the NT User, and uncheck the "Enable NT User Attributes" 
check box and attempt to save, you will get the following error:

"Cannot save to directory server:
error result (65);  Object class violation"

I'd like to keep the account in Directory Server and remove the windows account. 
 How do I do it?

Thanks

Denise 

The ntUser objectclass requires the ntUserDomainId attribute.  So you have to delete them both at the same time.  I don't know if you can do this in the console, but you can do it with ldapmodify.

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users