2015-02-26 16:51 GMT+04:00 Clément OUDOT <[email protected]>: > 2015-02-26 13:03 GMT+01:00 Jephte Clain <[email protected]>: >> Le 26/02/2015 12:54, Clément OUDOT a écrit : >> >>> 2015-02-26 5:02 GMT+01:00 Jephte Clain <[email protected]>: >>>> >>>> hello, >>>> >>>> answering to myself: I suppose I could add another synchronization >>>> task from ou=OldPeople that deactivate the account in AD. >>>> and document that one SHALL NOT run lsc with the -c clean command >>>> >>>> Is this the right thing to do, or is there another, better, way? >>>> >>> >>> From my point of view, the best would to have a single task that read >>> ou=People and ou=oldPeople, and then deactivate the AD entry depending >>> on the source branch. >>> >> >> very good idea! >> >> how is it done? two <asyncLdapSourceService> in the task, or two <baseDn> >> inside <asyncLdapSourceService> ? >> > > Simply use the parent branch as baseDn, and filter entries with their > objectClass for example. > > With OpenLDAP, you can also use extended matching filters, see > http://ldapwiki.willeke.com/wiki/ExtensibleMatch
awesome! thanks > > > Clément. -- cordialement, Jephté Clain Direction des Systèmes d'Information et des Usages Numériques - 2IG Tél. 0262 93 86 31 Fax. 0262 93 81 06 _______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
