<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Rich Megginson wrote:
<blockquote cite="mid42CEDA45.1000607@redhat.com" type="cite">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
<blockquote
cite="mid87C44BA2A3787E46AA0CEC479402F6B601FA96@NIHCESMLBX5.nih.gov"
type="cite">
<pre wrap="">Yes. There are two different connections. The main connection is from
FDS to AD - FDS does an LDAP BIND to AD to issue a sync request. When
you configure the windows sync agreement on FDS (usually using the
console), you have to specify the DN of the user on AD that has
administrative rights over the AD subtree (e.g.
cn=Administrator,cn=Users,dc=Domain,dc=TLD). So you will have to do
some work to create that user on AD, grant that user the appropriate
rights over the AD subtree, and figure out what the DN of that user is.
</pre>
</blockquote>
</blockquote>
The domain's 'Administrator' user is an easy option if you are allowed
to know its password.<br>
<br>
<br>
</body>
</html>