On to, 23 helmi 2017, Gady Notrica wrote:
Hello,
When setting up a trust between IPA and AD I am having the Warning
below. Question: Is this going to affect the users in Active Directory
if IPA sync back with AD?
winsync and trust are incompatible options. You are supposed to disable
winsync when switching to trust.
To your question, the attributes that would be added, aren't
synchronized back by winsync. Still, if you are switching from winsync
to trust, disable winsync first.
# ipa-adtrust-install
WARNING: 200 existing users or groups do not have a SID identifier assigned.
Installer can run a task to have ipa-sidgen Directory Server plugin generate
the SID identifier for all these users. Please note, the in case of a high
number of users and groups, the operation might lead to high replication
traffic and performance degradation. Refer to ipa-adtrust-install(1) man page
for details.
Do you want to run the ipa-sidgen task? [no]:
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
--
/ Alexander Bokovoy
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
