Hi,
I'm currently on fight with AD replication and synchronization. I need
to know if a non default synchronization (as it is porposed in the
agrment assistant) is possible.
I mean, is it possible to synchronize
- users in this case :
ou=people,dc=toutou,dc=tagada,dc=org (DS) with
ou=utilisateurs,ou=toutou,dc=tagada,dc=fr (AD)
and groups like this
ou=group,dc=toutou,dc=tagada,dc=org (DS) with
ou=groupes,ou=toutou,dc=tagada,dc=fr (AD)
Note that OU are different, suffix are different too.
I had ti create two different agrements because of OU naming (people vs
utilisateurs and group vs groupes), so one agrement for each object type.
I succeed in synchronizing users, but for groups, i have an error :
dn="<GUID=2313f95309633645bd2396aa959bea46>" or
dn="CN=pfffff,OU=groupes,OU=ORLEANS,DC=maqird,DC=fr"
[12/Oct/2009:11:58:03 +0200] NSMMReplicationPlugin - agmt="cn=orl_group"
(maqsvrdc0001:636): windows_replay_update: Processing modify operation
local dn="cn=pfffff,ou=group,dc=orleans,dc=ird,dc=fr" remote
dn="<GUID=2313f95309633645bd2396aa959bea46>"
[12/Oct/2009:11:58:03 +0200] - map_dn_values: this entry is not ours
uid=aubertin,ou=People,dc=orleans,dc=ird,dc=fr
[12/Oct/2009:11:58:03 +0200] agmt="cn=orl_group" (maqsvrdc0001:636) -
clcache_load_buffer: rc=-30989
[12/Oct/2009:11:58:03 +0200] NSMMReplicationPlugin - agmt="cn=orl_group"
(maqsvrdc0001:636): No more updates to send (cl5GetNextOperationToReplay)
It seems that the agrement does not recognize the user entry because it
is stored in a different subtree (the subtree for agrement is
ou=group,dc=orleans,dc=ird,dc=fr, the subtree for user is
ou=people,dc=orleans,dc=ird,dc=fr).
Is it right ?
Users and Group synch is it only possible when users and groups are in
the same agrement ?
If true, how can we do if OU naming is so different ?
I hope somebody will answer,
BR,
--
==========================================
Emmanuel BILLOT
IRD - Orléans
Délégation aux Systèmes d'Information (DSI)
tél : 02 38 49 95 88
==========================================
--
389 users mailing list
389-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
