2015-02-26 13:03 GMT+01:00 Jephte Clain <[email protected]>: > Le 26/02/2015 12:54, Clément OUDOT a écrit : > >> 2015-02-26 5:02 GMT+01:00 Jephte Clain <[email protected]>: >>> >>> hello, >>> >>> answering to myself: I suppose I could add another synchronization >>> task from ou=OldPeople that deactivate the account in AD. >>> and document that one SHALL NOT run lsc with the -c clean command >>> >>> Is this the right thing to do, or is there another, better, way? >>> >> >> From my point of view, the best would to have a single task that read >> ou=People and ou=oldPeople, and then deactivate the AD entry depending >> on the source branch. >> > > very good idea! > > how is it done? two <asyncLdapSourceService> in the task, or two <baseDn> > inside <asyncLdapSourceService> ? >
Simply use the parent branch as baseDn, and filter entries with their objectClass for example. With OpenLDAP, you can also use extended matching filters, see http://ldapwiki.willeke.com/wiki/ExtensibleMatch Clément. _______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
