In section 8.4.5 it talks about making an agreement one way...which is mostly 
what I want, so everything incl password changes from AD to IPA.   except I 
want account disabled / enabled to flow both ways.

So if I do a

ldapmodify -x -D "cn=directory manager" -w password -p 389 -h
ipaserver.example.com
dn: cn=ipa-winsync,cn=plugins,cn=config
changetype: modify
add: oneWaySync
oneWaySync: fromWindows

Does this effect bi-directional disabling? I assume it does.......

So then I have to do a,

ldapmodify -x -D "cn=directory manager" -w password -p 389 -h
ipaserver.example.com
dn: cn=ipa-winsync,cn=plugins,cn=config
changetype: modify
ipaWinSyncAcctDisable: both

is that syntax right?



regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to