Re: [389-users] win sync limitation

2011-06-27 Thread Juan Carlos Camargo Carrillo
Is there a way to use the IPA winsync plugin with 389ds? In general terms, there are some features of IPA that I'd like to use without changing the ldap server. El vie, 24-06-2011 a las 15:04 -0600, Rich Megginson escribió: On 06/24/2011 02:52 PM, solarflow99 wrote: I just noticed that a

[389-users] Reminder: LDAPCon 2011 Call for Papers

2011-06-27 Thread Peter Gietz
With the usual apologies. This is to remind you about the submission dead line for this years International Conference on LDAP: It is *July 8th* and it will not be extended. Best, Peter Am 08.04.2011 14:54, schrieb Peter Gietz: With the usual apologies. The 3rd Edition of the

[389-users] question syncing with AD

2011-06-27 Thread Mi Zhou
Hi, I am exploring the possibilities of us setting up a 389 server and have it synchronize with our AD. I read that both 389 and AD have to be running SSL. We have multiple domain controllers that trust each other, some running SSL, some not. I wonder if every one of them have to be running SSL

Re: [389-users] question syncing with AD

2011-06-27 Thread Rich Megginson
On 06/27/2011 01:38 PM, Mi Zhou wrote: Hi, I am exploring the possibilities of us setting up a 389 server and have it synchronize with our AD. I read that both 389 and AD have to be running SSL. We have multiple domain controllers that trust each other, some running SSL, some not. I wonder

Re: [389-users] question syncing with AD

2011-06-27 Thread Mi Zhou
Thanks Rich for the answer. A few more questions: Does existing password get synced during the initial full re-sychronization? or does it only sync changes? Does container entries got synced as well? Say, if a new OU was created on AD, will that be synced on 389? Thanks, Mi On Mon, 2011-06-27

Re: [389-users] question syncing with AD

2011-06-27 Thread Rich Megginson
On 06/27/2011 02:28 PM, Mi Zhou wrote: Does container entries got synced as well? Say, if a new OU was created on AD, will that be synced on 389? During the initial sync init phase - yes. During the incremental phase - no. Can we initiate a full resync to get this done, or it must be