I see.  We're aiming at having all users and groups created on the AD side
in the first place, so hopefully this will not be an issue.

Thanks for the info anyway - we'll take this into account while designing
our setup.


On 2/5/09, Rich Megginson <[email protected]> wrote:
>
> Kenneth Holter wrote:
>
>> Hi. Sorry for the late response.
>>  They AD-groups are global security groups. We've not quite decided on
>> whether to use existing AD-groups or create new ones aimed at the linux
>> environment.
>>
> I don't know if security groups will sync correctly.  When you create a
> group in DS that you want to sync to AD, it will be created as a
> distribution group.
>
>>
>>  On 1/29/09, *Rich Megginson* <[email protected] <mailto:
>> [email protected]>> wrote:
>>
>>    Kenneth Holter wrote:
>>
>>        Hi Rich.
>>          I haven't worked with the WindowsSync feature much myself,
>>        so I'm not sure about the group type details your requesting.
>>        But what we're working on is syncing AD groups over to DS, and
>>        use the group member information to build our own nis
>>        netgroups. These netgroups are then used by PAM to
>>        authenticate users.
>>
>>    What are the AD groups used for in AD?  Are they Security Groups
>>    or Distribution Groups or both?  Are they Global or Local (or
>>    Universal)?  We're just trying to get a sense of what people use
>>    Groups for on both sides.
>>
>>                 On 1/27/09, *Rich Megginson* <[email protected]
>>        <mailto:[email protected]> <mailto:[email protected]
>>        <mailto:[email protected]>>> wrote:
>>
>>           We're currently investigating the group sync feature of Windows
>>           Sync, and we wanted to know how it is deployed.  Do you sync
>>           groups?  What types of groups?  Security or Distribution?
>>         Global
>>           or Local?  Do the groups have "meaning" in both AD and
>>        Fedora DS,
>>           or only in one side?
>>
>>           --
>>           Fedora-directory-users mailing list
>>           [email protected]
>>        <mailto:[email protected]>
>>           <mailto:[email protected]
>>        <mailto:[email protected]>>
>>           https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>>
>>
>>  ------------------------------------------------------------------------
>>
>>        --
>>        Fedora-directory-users mailing list
>>        [email protected]
>>        <mailto:[email protected]>
>>        https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>>
>>    --
>>    Fedora-directory-users mailing list
>>    [email protected]
>>    <mailto:[email protected]>
>>    https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> --
>> Fedora-directory-users mailing list
>> [email protected]
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> Fedora-directory-users mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
>
--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Reply via email to