[Freeipa-users] winsync agreements, mostly one way.

[Steven Jones]

In section 8.4.5 it talks about making an agreement one way...which is mostly what I want, so everything incl password changes from AD to IPA.   except I want account disabled / enabled to flow both ways.

So if I do a

ldapmodify -x -D "cn=directory manager" -w password -p 389 -h
ipaserver.example.com
dn: cn=ipa-winsync,cn=plugins,cn=config
changetype: modify
add: oneWaySync
oneWaySync: fromWindows

Does this effect bi-directional disabling? I assume it does.......

So then I have to do a,

ldapmodify -x -D "cn=directory manager" -w password -p 389 -h
ipaserver.example.com
dn: cn=ipa-winsync,cn=plugins,cn=config
changetype: modify
ipaWinSyncAcctDisable: both

is that syntax right?



regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120917/2ffe6454/attachment.htm>