2013/6/9 Aaron Hardy at AC <[email protected]>:
> Thanks to you both for your quick response.
>
> Sébastien - You were correct, I forgot to add unicodePwd as a string in the
> fetchedAttributes section of the destination service. It appears to be
> working now.
>
> That also remedied the msDS-AccountDisabled issue - the accounts are now
> enabled on creation when they're given a valid unicodePwd.
>
> Clément - If I understand you correctly, as long as the userPassword is
> stored in clear text in OpenLDAP (and I have that attribute in the
> fetchedAttributes section of the source service), I would use something
> like:
>
> <dataset>
>   <name>unicodePwd</name>
>   <policy>FORCE</policy>
>   <createValues>
>
> <string>AD.getUnicodePwd(srcBean.getDatasetFirstValueById("userPassword"))</string>
>   </createValues>
> </dataset>
>
> The above throws an exception for me - I'm assuming it's a syntax error?

Verify that userPassword is in fetchedAttributes of the source.

Clément.
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to