[Fedora-directory-users] Re: Windows sync: how do you populate the posixUser attributes?

[Rich Megginson]

Erling Ringen Elvsrud wrote:
> I have managed to make Windows sync work and have one user synced from AD in
> my directory.
> The posixUser-attributes are still empty. How do you populate those
> attributes in an effective way?
>   
You can't, really, and even if you did, they would not be synced.  
Windows Sync ignores them.
> If I have an empty directory, and the users alredy exists in AD I have
> been thinking of this manual approach:
>
> 1. Perform a full re-sync from AD.
> 2. Export all the users in directory server in a LDIF-file  and with scripts
> populate the needed attributes like uid, shell, home, etc.
> 3. Write the changes back in directory server.
>
> For new users, if not too many, perform the needed changes manually.
>
> What do you think? Is it possible to do this automatically with Windows
> Sync or do I have to use approaches like I described?
>   
That should work.  But note that posix attributes will not sync to AD.  
And even if you did manage to find a posix schema that worked with AD, 
and added the posix schema on the AD side, those attributes would not be 
synced to Fedora DS.
> Thanks,
>
> Erling
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>