Re: [389-users] Sync with active directory doubts

2012-05-18 Thread Alberto Viana
Hello all,

I will modify my config. Thanks so much for the information.

Alberto Viana

On Fri, May 18, 2012 at 2:42 AM, Juan Carlos Camargo wrote:

> Alberto,
>
> I had a 389ds server with more than 70 windows sync agreements (for a
> first user reconciliation). Each of them to different AD domain controllers
> and different domains. No problems at all. But I wouldnt try it if the AD
> domain was the same regardless of the number of controllers that held it
> (your case).
>
> Regards!
>
> *
> *
>
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] Sync with active directory doubts

2012-05-17 Thread Juan Carlos Camargo
Alberto,I had a 389ds server with more than 70 windows sync agreements (for a first user reconciliation). Each of them to different AD domain controllers and different domains. No problems at all. But I wouldnt try it if the AD domain was the same regardless of the number of controllers that held it (your case). Regards!De: "Alberto Viana" Para: 389-users@lists.fedoraproject.orgEnviados: Jueves, 17 de Mayo 2012 23:26:04Asunto: [389-users] Sync with active directory doubtsHello,I have 2 389 DS servers a 6 AD servers and i read this on red hat documetation about windows replication:"There can only be a single sync agreement between the Directory Server environment and the Active Directory environment. Multiple sync agreements to the same Active Directory domain can create entry conflicts."

Now I´m trying the following scenario:


server2 389(consumer) <- replication -> server1 389 <- replication -> Server1 AD
                                                                                               Server2 AD
                                                                                               Server3 AD

So in my master 389 server (server1) I have 3 agreements with 3 different AD servers. It´s not clear if "Active Directory environment" means just one AD server.

Just to make clear that the 6 AD servers are in the same Active Directory domain and all replicate information with each other. I have this number of AD servers because they are located in different places(physically).


Can this scenario create entry conflitc? Am I suppose to sync with just one AD server?



Thanks,

Alberto Viana



--389 users mailing list389-users@lists.fedoraproject.orghttps://admin.fedoraproject.org/mailman/listinfo/389-users-- Juan Carlos Camargo Carrillo  
  957-211157 , 650932877--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users