[Fedora-directory-users] Windows 2003 synchronization considering OU

[Christian A. Rodriguez]

Hi everybody, I have the following Scenario:
I have to synchronize users in Active Directory with my Fedora  
Directory considering an organizational tree representing our  
departments.
For example:
Active Directory Tree to synchronize:
-------------------------------------
ou=Users
   +ou=IT
     (users from IT department)
   +ou=Development
     (users from Development department)
   +ou=Security
     (users from Security department)

Then when I create the Windows Sync Agreement to synchronize ou=Users  
in ADS with a tree of FDS, lets say ou=Active Directory, with the  
given configuration:
* DS Host: fds.example.com:389
* Windows Host: ads.example.com:636
* DS Subtree: ou=Active Directory,dc=example,dc=com
* Windows Subtree: ou=Users,dc=example-ads,dc=com
* Replicated Subtree: ou=Active Directory,dc=example,dc=com

The problem I have is that the synchronization process only works when  
I manually create the Organizational Units manually, but it doesn't  
seems to be created automatically by the replication process.

The question is: Can FDS deal with OU replication with Active Directory?


Thanks in advance

-- 
Lic. Christian A. Rodriguez

[Andrew C. Dingman]

On Fri, 2007-12-21 at 18:12 -0300, Christian A. Rodriguez wrote:
>  The question is: Can FDS deal with OU replication with Active
>  Directory?
>   
No. Container objects must be created manually. AD sync will only
replicate leaf nodes. This is documented in the AD sync section of the
RHDS manual (which is publicly available from the documentation section
of the Red Hat web site), and I think on the FDS wiki as well.

-Andrew