Thanks for your reply now i understand how to set it. But (i tried to find it but i wasn't succesfull) i have to set some condition but i dont know how to say somethiing like: if the user is not in openldap set it to disable in ad...
2011/8/1 Sébastien Bahloul <[email protected]> > Hello Cain, > > I suggest you take a look at this page : > http://lsc-project.org/wiki/documentation/1.2/configuration/syncoptions/activedirectory > > And especially to this : > > lsc.syncoptions.user.userAccountControl.default_value = \ > AD.userAccountControlSet(\ > dstBean.getAttributeValueById('userAccountControl'), \ > [AD.UAC_UNSET_ACCOUNTDISABLE]) > > > You may try to set it through a force_value that will use the current value > and set the correct bit : > > lsc.syncoptions.user.userAccountControl.force_value = \ > AD.userAccountControlSet(\ > dstBean.getAttributeValueById('userAccountControl'), \ > [AD.UAC_SET_ACCOUNTDISABLE]) > > > Regards, > > > 2011/8/1 <[email protected]> > >> Hello all, >> >> i succefully did a script on synchroniszing an openLDAP to Active >> Directory whitch works fine. We used it some time, but now there are some >> new requierments: >> >> Also i have to say that we only use openLDAP for User management. AD is >> just for the MS Tools we use. >> >> Renaming of Usernames: Sometimes we have to rename some user, this also >> includes the uid and other fields. The only uniqe value is the >> employeeNumber field. >> I also synchronize by filtering through employeeNumber, but it does not >> work if a user is renamed. >> Strangely it works for the group synchronisation. >> >> Deaktivation of Users: If a employee gets fired we delete the user >> account. But for the MS Tool we have it is not possible to delete the >> account. I have to deactivate it. Unfortunately i dont know how to. >> >> Is it possible to get some help for this? Right now i am lost... >> >> regards... >> -- >> NEU: FreePhone - 0ct/min Handyspartarif mit Geld-zurück-Garantie! >> Jetzt informieren: http://www.gmx.net/de/go/freephone >> _______________________________________________________________ >> Ldap Synchronization Connector (LSC) - http://lsc-project.org >> >> lsc-users mailing list >> [email protected] >> http://lists.lsc-project.org/listinfo/lsc-users >> > > > > -- > Sebastien BAHLOUL > IAM / Security specialist > Ldap Synchronization Connector : http://lsc-project.org > Blog : http://sbahloul.wordpress.com/ > > > _______________________________________________________________ > Ldap Synchronization Connector (LSC) - http://lsc-project.org > > lsc-users mailing list > [email protected] > http://lists.lsc-project.org/listinfo/lsc-users > >
_______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
