Ouch! The AD admins have already expressed an unwillingness to move some
users into a separate container. And I don't want to have several thousand
unnecessary entries in my IPA system. It looks like password synchronization
is not going to be an option.
Thanks,
-Mark
________________________________________________________________
Mark Tovey - UNIX Engineer | Service Strategy & Design
UTi<http://www.go2uti.com/> | 400 SW Sixth Ave, Suite 1100 | Portland | Oregon
| 97204 | USA
[email protected]<mailto:[email protected]> | O / C +1 503 953-1389 | Skype:
mark.tovey2
From: Rich Megginson [mailto:[email protected]]
Sent: Tuesday, July 16, 2013 1:00 PM
To: Tovey, Mark
Cc: [email protected]
Subject: Re: [Freeipa-users] Limit password synchronization from Active
Directory
On 07/16/2013 01:48 PM, Tovey, Mark wrote:
Is there a way to limit what user accounts are synchronized from Active
Directory? There are around 15,000 entries in our production AD system, but
probably only about 300 of those need to have an account in the IPA system.
Can we set an attribute in the user information in AD that would flag that this
is a candidate for replication, and lack of that attribute would cause an
account to be skipped?
No. The only thing you can do is create a special container (cn=IPA users or
ou=IPA users or something like that), move the users you want to sync into that
container, and sync only that container.
Thanks,
-Mark
________________________________________________________________
Mark Tovey - UNIX Engineer | Service Strategy & Design
UTi<http://www.go2uti.com/> | 400 SW Sixth Ave, Suite 1100 | Portland | Oregon
| 97204 | USA
[email protected]<mailto:[email protected]> | O / C +1 503 953-1389 | Skype:
mark.tovey2
_______________________________________________
Freeipa-users mailing list
[email protected]<mailto:[email protected]>
https://www.redhat.com/mailman/listinfo/freeipa-users
_______________________________________________
Freeipa-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-users
