[Fedora-directory-users] Do you use WinSync for group sync?

[Rich Megginson]

Emmanuel BILLOT wrote:
> Rich Megginson a écrit :
>> We're currently investigating the group sync feature of Windows Sync, 
>> and we wanted to know how it is deployed.  Do you sync groups?  What 
>> types of groups?  Security or Distribution?  Global or Local?  Do the 
>> groups have "meaning" in both AD and Fedora DS, or only in one side?
> Hi,
>
> We are very interested in Windows Sync. We want to share as database 
> between AD ans Fedora DS, because both have qualities in our 
> environnement. AD is used for domain management (client computers) and 
> file sharing (NTFS), indeed AD basic work.
> We also need a "real LDAP" (RFC compliant, opensource, easy to modify 
> structure, etc...) for compatibility with the OpenSource environment, 
> authentification and directory.
>
> Fedora/RedHat directory seems to be the best way for use with windows 
> sync. Howerver, this functionnality is quite difficult to configure 
> (essentially for password) and field matching between AD and FDS 
> should be more opened. I mean Windows Sync should be perfect is thoses 
> additionnal function were implemented :
> * choose matching between AD and FDS fileds (eq mail with kerberos 
> login, sn and givenname with MS specific ones)
> * sync sub trees with much more precision (eq sync 
> ou=users,ou=microsoft,dc=europe,dc=priv with 
> ou=people,dc=microsoft,dc=example,dc=fr)
>
> For group sync we should use security groups, with global type. In 
> fact, windows groups are used for file rights management and security, 
> like posix group in unix, and for global authorization like roles.
So in AD, you use Security Groups, and you use them for access control.
>
> is Windows sync going to be enhanced ?
No.  Windows Sync is only for the bare minimum user/group/password 
sync.  If you need to do more than that, I suggest you look at Penrose 
Virtual Directory - http://docs.safehaus.org/display/PENROSE/Home
>
> br,
>> ------------------------------------------------------------------------
>>
>> -- 
>> Fedora-directory-users mailing list
>> Fedora-directory-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>   
>
>


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20090129/0f260062/attachment.bin>