<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 07/16/2013 01:48 PM, Tovey, Mark
wrote:<br>
</div>
<blockquote
cite="mid:159018F515D5B14CA76C88F9C425325A65DDEF@sinmpt10.corp.go2uti.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Is there a way to limit what user
accounts are synchronized from Active Directory? There are
around 15,000 entries in our production AD system, but
probably only about 300 of those need to have an account in
the IPA system. Can we set an attribute in the user
information in AD that would flag that this is a candidate for
replication, and lack of that attribute would cause an account
to be skipped?</p>
</div>
</blockquote>
<br>
No. The only thing you can do is create a special container (cn=IPA
users or ou=IPA users or something like that), move the users you
want to sync into that container, and sync only that container.<br>
<br>
<blockquote
cite="mid:159018F515D5B14CA76C88F9C425325A65DDEF@sinmpt10.corp.go2uti.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal"> Thanks,<o:p></o:p></p>
<p class="MsoNormal"> -Mark<o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><b><span
style="font-size:8.0pt;font-family:"Arial","sans-serif";color:gray"
lang="EN-GB"><o:p> </o:p></span></b></p>
<p class="MsoNormal" style="text-autospace:none"><b><span
style="font-size:8.0pt;font-family:"Arial","sans-serif";color:gray"
lang="EN-GB">________________________________________________________________<o:p></o:p></span></b></p>
<p class="MsoNormal" style="text-autospace:none"><b><span
style="font-size:8.0pt;font-family:"Arial","sans-serif";color:gray"
lang="EN-GB">Mark Tovey - UNIX Engineer | Service Strategy
& Design<o:p></o:p></span></b></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:7.5pt;font-family:"Arial","sans-serif";color:blue"
lang="EN-GB"><a moz-do-not-send="true"
href="http://www.go2uti.com/"><span style="color:blue">UTi</span></a>
</span><span
style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"
lang="EN-GB">| 400 SW Sixth Ave, Suite 1100 | Portland |
Oregon | 97204 | USA<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"
lang="EN-GB"><a moz-do-not-send="true"
href="mailto:MTovey@go2uti.com"><span style="color:blue">MTovey@go2uti.com</span></a>
| O / C +1 503 953-1389 | Skype: mark.tovey2</span><span
lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
</body>
</html>