Had a chat with another 389 developer, and we think that you can only fractionally
replicate from DS to AD. From AD to DS you have to accept all incoming data as we
understand it.
You *could* create a custom plugin that strips the attributes you don't want on repl
operations, but that could be quite involved.
Sorry about that,
On 19 Jan 2021, at 15:21, Andry Michaelidou
<andrim(a)cs.ucy.ac.cy> wrote:
Hello again,
If i try to run
dsconf -D "cn=Directory Manager" ldap://hostname repl-winsync-agmt set
--suffix="dc=xx" --frac-list="mail" "Users Replication"
i get :
Error: Operations error
[18/Jan/2021:11:31:07.744672483 +0200] - ERR - NSMMReplicationPlugin -
agmtlist_modify_callback - Failed to update replicated attributes for agreement
agmt="cn=Users Replication"
In my point of view seems to be related to
https://github.com/389ds/389-ds-base/issues/10
Any developer in the group to verify if this is the case?
Is fractional replication feasible with winsync or only with normal replication?
--
Andry Michaelidou Papa | IT Systems Administrator |Department of Computer Science |
University of Cyprus
Tel: +357.22.892734 | Fax: +357.22.8927201 |
http://www.cs.ucy.ac.cy/~andrim
On 18/1/2021 3:29 π.μ., William Brown wrote:
>> On 15 Jan 2021, at 18:44, Andry Michaelidou <andrim(a)cs.ucy.ac.cy>
>> wrote:
>>
>> Hi all,
>> I am trying to have one way windows sync (from windows AD to LDAP) but i need to
exclude some attributes.
>> Is this possible? I cannot find any documentation on this.
>>
>> I already try this with 389ds running on CentOS7 and CentOS8 with no result.
>> I am using nsDS5ReplicatedAttributeListTotal and nsDS5ReplicatedAttributeList
attributes but i am still getting replicated values of the excluded attributes.
>>
>> I found this but i am not sure if this is the case:
>>
https://bugzilla.redhat.com/show_bug.cgi?id=800101
>>
>> Can you please provide guidelines on this?
>> Anyone try this before?
>>
> Looking at dsconf winsync command I see:
>
> dsconf localhost repl-winsync-agmt create --help
> ...
> --frac-list FRAC_LIST
> List of attributes to NOT replicate to the consumer during
incremental updates
>
>
> Perhaps this is the setting you want?
>
>
>
>> Regards,
>>
>> --
>> Andry Michaelidou Papa | IT Systems Administrator |Department of Computer Science
| University of Cyprus
>> Tel: +357.22.892734 | Fax: +357.22.8927201 |
>>
http://www.cs.ucy.ac.cy/~andrim
>>
>>
>> _______________________________________________
>> 389-users mailing list --
>> 389-users(a)lists.fedoraproject.org
>>
>> To unsubscribe send an email to
>> 389-users-leave(a)lists.fedoraproject.org
>>
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>>
>> List Guidelines:
>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>
>> List Archives:
>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
> —
> Sincerely,
>
> William Brown
>
> Senior Software Engineer, 389 Directory Server
> SUSE Labs, Australia
> _______________________________________________
> 389-users mailing list --
> 389-users(a)lists.fedoraproject.org
>
> To unsubscribe send an email to
> 389-users-leave(a)lists.fedoraproject.org
>
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server
SUSE Labs, Australia