I see. We're aiming at having all users and groups created on the AD side in the first place, so hopefully this will not be an issue.
Thanks for the info anyway - we'll take this into account while designing our setup.
On 2/5/09, Rich Megginson <rmeggins@xxxxxxxxxx> wrote:
Kenneth Holter wrote:
Hi. Sorry for the late response.I don't know if security groups will sync correctly. When you create a group in DS that you want to sync to AD, it will be created as a distribution group.
They AD-groups are global security groups. We've not quite decided on whether to use existing AD-groups or create new ones aimed at the linux environment.
On 1/29/09, *Rich Megginson* <rmeggins@xxxxxxxxxx <mailto:rmeggins@xxxxxxxxxx>> wrote:
Kenneth Holter wrote:
Hi Rich.
I haven't worked with the WindowsSync feature much myself,
so I'm not sure about the group type details your requesting.
But what we're working on is syncing AD groups over to DS, and
use the group member information to build our own nis
netgroups. These netgroups are then used by PAM to
authenticate users.
What are the AD groups used for in AD? Are they Security Groups
or Distribution Groups or both? Are they Global or Local (or
Universal)? We're just trying to get a sense of what people use
Groups for on both sides.
On 1/27/09, *Rich Megginson* <rmeggins@xxxxxxxxxx
<mailto:rmeggins@xxxxxxxxxx> <mailto:rmeggins@xxxxxxxxxx
<mailto:rmeggins@xxxxxxxxxx>>> wrote:
We're currently investigating the group sync feature of Windows
Sync, and we wanted to know how it is deployed. Do you sync
groups? What types of groups? Security or Distribution?
Global
or Local? Do the groups have "meaning" in both AD and
Fedora DS,
or only in one side?
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
<mailto:Fedora-directory-users@xxxxxxxxxx>
<mailto:Fedora-directory-users@xxxxxxxxxx
<mailto:Fedora-directory-users@xxxxxxxxxx>>
https://www.redhat.com/mailman/listinfo/fedora-directory-users
------------------------------------------------------------------------
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
<mailto:Fedora-directory-users@xxxxxxxxxx>
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
<mailto:Fedora-directory-users@xxxxxxxxxx>
https://www.redhat.com/mailman/listinfo/fedora-directory-users
------------------------------------------------------------------------
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
