<html dir="ltr"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style id="owaParaStyle" type="text/css">  P {margin-top:0;margin-bottom:0;}</style> </head> <body ocsi="0" fpstyle="1" bgcolor="#FFFFFF"> <div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">In section 8.4.5 it talks about making an agreement one way...which is mostly what I want, so everything incl password changes from AD to IPA. except I want account disabled / enabled to flow both ways.<br> <br> So if I do a <br> <br> ldapmodify -x -D "cn=directory manager" -w password -p 389 -h<br> ipaserver.example.com<br> dn: cn=ipa-winsync,cn=plugins,cn=config<br> changetype: modify<br> add: oneWaySync<br> oneWaySync: fromWindows<br> <br> <div>Does this effect bi-directional disabling? I assume it does.......<br> <br> So then I have to do a,<br> <br> ldapmodify -x -D "cn=directory manager" -w password -p 389 -h<br> ipaserver.example.com<br> dn: cn=ipa-winsync,cn=plugins,cn=config<br> changetype: modify<br> ipaWinSyncAcctDisable: both<br> <br> is that syntax right?<br> <br> <br> <div style="font-family: Tahoma; font-size: 13px;"> <p>regards</p> <p>Steven Jones</p> <p>Technical Specialist - Linux RHCE</p> <p>Victoria University, Wellington, NZ</p> <p>0064 4 463 6272</p> </div> </div> <br> </div> </body> </html>