Issue #357 has been updated by Clément OUDOT.

Status changed from Feedback to Closed
Target version changed from 1.3.x branch to 2.0
% Done changed from 0 to 100

No feedback, closing.
----------------------------------------
Bug #357: synch of RDN in DN only with modrdn set as true?
http://tools.lsc-project.org/issues/357

Author: Gaylord Josupeit
Status: Closed
Priority: High
Assigned to: Sébastien Bahloul
Category: Core
Target version: 2.0
Problem in version: 1.2.0


Hello,

we try to synchronize OpenLDAP to AD.
The first synch to the "empty" AD is working correctly.
When synching after having changed several Users, those RDN's according to the 
DN are not changed, if modrdn is set on false, while all other attributes get 
changed correctly!
synching the RDN's of the DN's can only be done by setting modrdn to true, but 
requires two starts of the same script!
On first run the specific RDN's in the AD are set to "newentry" with the new 
value, while the "oldentry" is deleted!
This happens to all RDN's that have to be changed. After that the script stops 
and a second start becomes necessary to synchronize the complete dataset in the 
end!
And that seems to be potentially dangerous, for what happens to users, that are 
being changed and want to log in to the system? They seem to be closed out 
until the synch is done.
with the 2 test-users we used in the test-environment this all took about 2 
minutes, but what if setting this up on the productive-environment with 
severals thousands of users?
According to the documentation the script should work, even with or without 
setting modrdn as true, but it doesn't.
So, why is it necessary to set modrdn to true?

Thanks,
G.Josupeit


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://tools.lsc-project.org/my/account
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-dev mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-dev

Reply via email to