<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 11 (filtered medium)"> <style>  </style> </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> Hello,<o:p></o:p> <o:p> </o:p> I am interested in knowing if anyone is using the PassSync functionality in only one direction, making the Fedora-DS a consumer only to the Active Directory server. I am only interested in populating the Fedora-DS with the user account information and passwords; there is no need for me to go in the other direction. With that in mind, would I still create a ‘Single Master’ replication configuration or is there an alternate method since the Fedora-DS is really only the consumer and not a supplier? My guess is that a ‘Single Master’ configuration will still have to be created since the winsync code builds off the replication plug-in. If it turns out that the Fedora-DS must be a supplier, is there any method to stop the Fedora-DS from expecting the Active Directory system to have correctly sync’d databases? <o:p></o:p> <o:p> </o:p> Other than the functionality of pushing passwords and accounts from my Fedora-DS system not being needed (in fact the AD server group will only allow my Fedora-DS to pull and not update) I am hoping that this could fix the “db vector errors” from occurring.<o:p></o:p> <o:p> </o:p> Any suggestions from the Fedora-DS veterans’ out there? Thanks<o:p></o:p> </div> </body> </html>