Hello:

I was hoping someone, anyone, would have some ideas on this. Is it just expected that you'd only want to sync something like ou=Users,dc=example,dc=com?

Thanks!

Jonas Courteau

On Mon, 2008-10-20 at 15:31 -0700, Jonas Courteau wrote:

Hello all:

I've been fiddling around off and on getting a fedora DS box sync'd with our AD server. The problem is, the way the users are arranged on the AD server, I'm not sure how to sync everything at once.

The layout (appropriately anonymized) on the AD server:

• dc=example,dc=com

|- ou=Groups | |- a bunch of groups | |- ou=Unit1 | |- a bunch of users belonging to one business unit | |- ou=Unit2 | |- more users, different business unit | |- ou=Users |- system users

On the DS side of things, I've manually created the appropriate OUs, but the question is - how do I configure the sync agreement to sync all the OUs at once? It only seems to work if I configure the sync agreement to a subtree including only one of the OUs.

I'm trying to do this without having to convince the AD administrator to change his odd layout of users - any ideas?

Thanks!

Jonas Courteau