Hello Cain,

I suggest you take a look at this page :
http://lsc-project.org/wiki/documentation/1.2/configuration/syncoptions/activedirectory

And especially to this :


lsc.syncoptions.user.userAccountControl.default_value = \
    AD.userAccountControlSet(\
        dstBean.getAttributeValueById('userAccountControl'), \
        [AD.UAC_UNSET_ACCOUNTDISABLE])


You may try to set it through a force_value that will use the current value
and set the correct bit :


lsc.syncoptions.user.userAccountControl.force_value = \
    AD.userAccountControlSet(\
        dstBean.getAttributeValueById('userAccountControl'), \
        [AD.UAC_SET_ACCOUNTDISABLE])


Regards,


2011/8/1 <[email protected]>

> Hello all,
>
> i succefully did a script on synchroniszing an openLDAP to Active Directory
> whitch works fine. We used it some time, but now there are some new
> requierments:
>
> Also i have to say that we only use openLDAP for User management. AD is
> just for the MS Tools we use.
>
> Renaming of Usernames: Sometimes we have to rename some user, this also
> includes the uid and other fields. The only uniqe value is the
> employeeNumber field.
> I also synchronize by filtering through employeeNumber, but it does not
> work if a user is renamed.
> Strangely it works for the group synchronisation.
>
> Deaktivation of Users: If a employee gets fired we delete the user account.
> But for the MS Tool we have it is not possible to delete the account. I have
> to deactivate it. Unfortunately i dont know how to.
>
> Is it possible to get some help for this? Right now i am lost...
>
> regards...
> --
> NEU: FreePhone - 0ct/min Handyspartarif mit Geld-zurück-Garantie!
> Jetzt informieren: http://www.gmx.net/de/go/freephone
> _______________________________________________________________
> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>
> lsc-users mailing list
> [email protected]
> http://lists.lsc-project.org/listinfo/lsc-users
>



-- 
Sebastien BAHLOUL
IAM / Security specialist
Ldap Synchronization Connector : http://lsc-project.org
Blog : http://sbahloul.wordpress.com/
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to