[Freeipa-users] Question on AD to freeipa sync

[Steven Jones]

Hi,

In the documentation it says that new accounts in AD are syncd over to freeIPA, so IPA sets the UID as it "arrives"?

What happens if the user is an existing one and has a UID they want to retain, does that transfer over and get used?

Also how do you set permissions and groups?  does the new user just go into a default group and then you login to freeIPA and set them up? or can you put the GIDs into AD and they get transferred and the user put into the "right" groups" automagically?

Looks like I can set this sort of thing "how I want" in the sync agreement? 

regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272