Hi,
I have now 389 to AD sync working (thanks Rich!). Another question related to that.
There are currently two Windows sync agreements:
1. Users ou=People,dc=domain,dc=com <==> cn=Users,dc=domain,dc=com
2. Projects ou=Projects,ou=Groups,dc=domain,dc=com <==> ou=Projects,dc=domain,dc=com
Problem: cn=Project1,ou=Projects,ou=Groups,dc=domain,dc=com has group members defined like this: ... uniqueMember: uid=user,ou=People,dc=domain,dc=com ...
I get the following replication error: map_dn_values: this entry is not ours uid=user,ou=People,dc=domain,dc=com
I guess it means that I can't mix groups and users from different sync agreements? How would I solve this scenario then?
Mr. Vesa Alho
On 03/04/2013 01:51 AM, Vesa Alho wrote:
Hi,
I have now 389 to AD sync working (thanks Rich!). Another question related to that.
There are currently two Windows sync agreements:
- Users
ou=People,dc=domain,dc=com <==> cn=Users,dc=domain,dc=com
- Projects
ou=Projects,ou=Groups,dc=domain,dc=com <==> ou=Projects,dc=domain,dc=com
Problem: cn=Project1,ou=Projects,ou=Groups,dc=domain,dc=com has group members defined like this: ... uniqueMember: uid=user,ou=People,dc=domain,dc=com ...
I get the following replication error: map_dn_values: this entry is not ours uid=user,ou=People,dc=domain,dc=com
I guess it means that I can't mix groups and users from different sync agreements?
Right.
How would I solve this scenario then?
try doing the sync from dc=domain,dc=com <==> dc=domain,dc=com
Mr. Vesa Alho
389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
389-users@lists.fedoraproject.org