[Fedora-directory-users] Do you use WinSync for group sync?

[Kenneth Holter]

I see.  We're aiming at having all users and groups created on the AD side
in the first place, so hopefully this will not be an issue.

Thanks for the info anyway - we'll take this into account while designing
our setup.


On 2/5/09, Rich Megginson <rmeggins at redhat.com> wrote:
>
> Kenneth Holter wrote:
>
>> Hi. Sorry for the late response.
>>  They AD-groups are global security groups. We've not quite decided on
>> whether to use existing AD-groups or create new ones aimed at the linux
>> environment.
>>
> I don't know if security groups will sync correctly.  When you create a
> group in DS that you want to sync to AD, it will be created as a
> distribution group.
>
>>
>>  On 1/29/09, *Rich Megginson* <rmeggins at redhat.com <mailto:
>> rmeggins at redhat.com>> wrote:
>>
>>    Kenneth Holter wrote:
>>
>>        Hi Rich.
>>          I haven't worked with the WindowsSync feature much myself,
>>        so I'm not sure about the group type details your requesting.
>>        But what we're working on is syncing AD groups over to DS, and
>>        use the group member information to build our own nis
>>        netgroups. These netgroups are then used by PAM to
>>        authenticate users.
>>
>>    What are the AD groups used for in AD?  Are they Security Groups
>>    or Distribution Groups or both?  Are they Global or Local (or
>>    Universal)?  We're just trying to get a sense of what people use
>>    Groups for on both sides.
>>
>>                 On 1/27/09, *Rich Megginson* <rmeggins at redhat.com
>>        <mailto:rmeggins at redhat.com> <mailto:rmeggins at redhat.com
>>        <mailto:rmeggins at redhat.com>>> wrote:
>>
>>           We're currently investigating the group sync feature of Windows
>>           Sync, and we wanted to know how it is deployed.  Do you sync
>>           groups?  What types of groups?  Security or Distribution?
>>         Global
>>           or Local?  Do the groups have "meaning" in both AD and
>>        Fedora DS,
>>           or only in one side?
>>
>>           --
>>           Fedora-directory-users mailing list
>>           Fedora-directory-users at redhat.com
>>        <mailto:Fedora-directory-users at redhat.com>
>>           <mailto:Fedora-directory-users at redhat.com
>>        <mailto:Fedora-directory-users at redhat.com>>
>>           https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>>
>>
>>  ------------------------------------------------------------------------
>>
>>        --
>>        Fedora-directory-users mailing list
>>        Fedora-directory-users at redhat.com
>>        <mailto:Fedora-directory-users at redhat.com>
>>        https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>>
>>    --
>>    Fedora-directory-users mailing list
>>    Fedora-directory-users at redhat.com
>>    <mailto:Fedora-directory-users at redhat.com>
>>    https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20090206/79732c1a/attachment.html>