winsync - group membership and different ou's

[DuWayne Holsbeck]

that's what I found, I synced the DS to the AD root suffix and everything seems to
work fine. As long as AD and DS users and groups use the same OU structure. Users and
Groups on DS and AD are in the same OUs. Your milage may very.

On May 25, 2014 3:08:42 PM CDT, Christian Zimmermann <chris612(a)gmx.de&gt; wrote:
> HI everybody,
>
>  
>
> I'm using 389 with our AD (2k8) to sync users and groups.
>
> Basically everything works, except the group membership of users that
> are not
>
> in the same OU as the group.
>
> Memberships of users that are in test_ou01 will not getting synced if
> the group is in test_ou02.
>
> The Membership gets synced if the user and the group he belongs to are
> in the same ou.
>
>  
>
> Is this a limitation of the winsync agreement or am I missing
> something? 
>
>  
>
> cheers
>
> christian 
>
>  
>
>
>
> ------------------------------------------------------------------------
>
> --
> 389 users mailing list
> 389-users(a)lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users 
-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

[DuWayne Holsbeck]

On May 25, 2014 3:52:48 PM CDT, DuWayne Holsbeck <drh(a)niptron.com&gt; wrote:
> that's what I found, I synced the DS to the AD root suffix and
> everything seems to work fine. As long as AD and DS users and groups
> use the same OU structure. Users and Groups on DS and AD are in the
> same OUs. Your milage may very.
>
> On May 25, 2014 3:08:42 PM CDT, Christian Zimmermann <chris612(a)gmx.de&gt;
> wrote:
> >HI everybody,
> >
> > 
> >
> >I'm using 389 with our AD (2k8) to sync users and groups.
> >
> >Basically everything works, except the group membership of users that
> >are not
> >
> >in the same OU as the group.
> >
> >Memberships of users that are in test_ou01 will not getting synced if
> >the group is in test_ou02.
> >
> >The Membership gets synced if the user and the group he belongs to are
> >in the same ou.
> >
> > 
> >
> >Is this a limitation of the winsync agreement or am I missing
> >something? 
> >
> > 
> >
> >cheers
> >
> >christian 
> >
> > 
> >
> >
> >
> >------------------------------------------------------------------------
> >
> >--
> >389 users mailing list
> &gt;389-users(a)lists.fedoraproject.org
> >https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> -- 
> Sent from my Android device with K-9 Mail. Please excuse my brevity. 
-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.