<HTML>
<HEAD>
<TITLE>one-way winsync</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Dear 389-ds community,<BR>
<BR>
I have a question about windows sync agreement. Here’s the scenario:<BR>
<BR>
two Windows DC’s and two 389-ds servers as below. <BR>
<BR>
Question1: Can I setup a one-way winsync i.e from windows to ldap? I have tried it and it was like hit or miss. I did this by not giving the “write” permissions to AD for “CN=Sync Manager”. Is this valid way of sync-ing one way? I have error messages “Replica has no update vector. It has never been initialized”. I did a full-resynchronization and it went well without errors. But I am not seeing any entry updates.<BR>
<BR>
Question2: If I have windows sync on both the 389-ds sync-ing to a diferent DC. Does it cause any loop or issues. The problem I am facing is, that I have different OU’s in AD like ou=Marketing, ou=Finance, ou=Customers and only one “ou=People” in 389-ds. <BR>
<BR>
I want only one-way sync. AD-->389-ds<BR>
<BR>
Topology I am trying to make work. Please share your comments.<BR>
<BR>
|--------| |------- |<BR>
| DC-1 | <---replication----> | DC-2 |<BR>
|--------| |--------|<BR>
| |<BR>
winsync Winsync<BR>
| |<BR>
<BR>
|---------| |-------- |<BR>
| 389-1 | <---replication----> | 389-2 |<BR>
|---------| |---------|<BR>
<BR>
Thanks,<BR>
Prashanth<BR>
</SPAN></FONT>
</BODY>
</HTML>