[Fedora-directory-users] Unidirectional Windows Sync possible

[Rich Megginson]

Jason Beavers wrote:
> Hi All,
>
> Probably been asked before but i didn't quite find the answer i was 
> looking for by searching.
> Is it possible to configure a Unidirectional Windows Sync agreement?
>
> Scenario:
>
> Large Enterprise with fully deployed Windows AD
>
> We would like to develop an application that runs off of Fedora DS, 
> and allows the users to login using their normal AD credentials.
> We'll be storing alot of application specific data about each user, 
> (preferences, settings, etc) in FedoraDS and are prohibited from 
> writing anything back to AD.
> Which pretty much rules out modifying the AD schema, or writing 
> changes back to AD (corporate mandate, don't ask). 
>
> So basically what i'm asking is whether its possible to configure 
> Windows Sync such that Users (and passwords) can be sync'd over from 
> AD to FDS but not the other way around.
> This way all user management (creation, password changes, etc) always 
> happens in AD and we only sync over the authentication credentials, 
> leaving the other stuff to FDS.
>
> Make sense?  Thoughts?
It's not directly supported, but I suppose you could have your AD 
administrator create a special admin user that had read/search rights 
over the AD tree but not update/write rights.  Then Fedora DS could read 
the info from AD but not right any back.  I don't know if this would 
make Fedora DS blow up because it would get lots of errors attempting to 
write updates to AD.
>
> Thanks in advance
>
> ------------------------------------------------------------------------
> Never miss a thing. Make Yahoo your homepage. 
> <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20080122/83c4afc5/attachment.bin>