Hi All,

Probably been asked before but i didn't quite find the answer i was looking for 
by searching.
Is it possible to configure a Unidirectional Windows Sync agreement?

Scenario:

Large Enterprise with fully deployed Windows AD

We would like to develop an application that runs off of Fedora DS, and allows 
the users to login using their normal AD credentials.
We'll be storing alot of application specific data about each user, 
(preferences, settings, etc) in FedoraDS and are prohibited from writing 
anything back to AD.
Which pretty much rules out modifying the AD schema, or writing changes back to 
AD (corporate mandate, don't ask).  

So basically what i'm asking is whether its possible to configure Windows Sync 
such that Users (and passwords) can be sync'd over from AD to FDS but not the 
other way around.
This way all user management (creation, password changes, etc) always happens 
in AD and we only sync over the authentication credentials, leaving the other 
stuff to FDS.

Make sense?  Thoughts?

Thanks in advance




      
____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Reply via email to