[Freeipa-users] syncing users more not limited to a subtree

Dmitri Pal dpal at redhat.com
Fri Feb 10 18:41:23 UTC 2012


On 02/10/2012 10:28 AM, Rich Megginson wrote:
> On 02/10/2012 04:01 AM, David Juran wrote:
>> Hello
>>
>> I wonder if it's somehow possible to sync AD-users more selectively then
>> just by sub-tree. In my case, I'm dealing with a very large organisation
>> where the users that are to be synced to IPA aren't grouped by a subtree
>> in AD but rather spread out. Can this be handled somehow?
>>
> I don't think so, but can you provide some examples?
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users

Rich, can one create two different winsync agreements that use different
sub trees on the AD side? If there anything that would prevent it to
work? May be it should be done from 2 IPA replicas?

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/






More information about the Freeipa-users mailing list