Hi Neil,

On 19/04/2011 17:02, Neil L Thackeray wrote:
> I'm been able to sync users from our OpenLDAP server to our AD, but so
> far all the users are disabled. I tried using the following to
> override the disabling:
> lsc.syncoptions.SyncAccounts.userAccountControl.create_value =
> AD.userAccountControlSet( "0",
> [AD.UAC_SET_NORMAL_ACCOUNT,AD.UAC_UNSET_ACCOUNTDISABLE]).
>
> No luck on current accounts in the AD or in accounts created with this
> setting.

Using a create_value will only affect newly created accounts. If you
want to change current (already existing) accounts, use force_value instead.

Are you sure that this attribute is being updated? Make sure it's in
your lsc.tasks.task.dstService.attrs configuration option.

If you still have no success, check that the password is set and is not
marked as expired.

Hope this helps,
Jonathan

-- 
--------------------------------------------------------------
Jonathan Clarke - [email protected]
--------------------------------------------------------------
Ldap Synchronization Connector (LSC) - http://lsc-project.org
--------------------------------------------------------------

_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to