Hi Clément , > I think you could use LSC async mode with it, but only on suffix base and with (objectClass=*) filter.
Could you explain, what "on suffix base" mean? Thank you, Alexey ________________________________ From: [email protected] <[email protected]> on behalf of Clément OUDOT <[email protected]> Sent: Thursday, October 27, 2016 4:07:10 PM To: [email protected] Subject: Re: [lsc-users] asyncLdapSourceService and Active Directory Le 27/10/2016 à 14:46, Alexey Tarasevich a écrit : Dear LSC Community, An option serverType with ActiveDirectory value is described for asyncLdapSourceService on the following page: http://lsc-project.org/wiki/documentation/latest/configuration/service/sourceasyncldap However in this mailing list Clément Oudot says the following: * "asyncLdapSourceService will not work with AD. Keep the ldapSourceService and use "lsc -s all -c all" to run your tasks." http://lists.lsc-project.org/pipermail/lsc-users/2016-June/002983.html (June 6, 2016) * " Why are you using asyncLdapSourceService? You can only use it againts OpenLDAP if you have syncprov overlay configured." http://www.mail-archive.com/[email protected]/msg03028.html (Oct 4, 2016) Could you clarify, if asyncLdapSourceService expected to work with Active Directory? When I tried to replace ldapSourceService with asyncLdapSourceService (with appropriate changes) I got: 10-26 17:54:54 or-2 [D] Removing <2, org.apache.directory.ldap.client.api.future.SearchFuture> 10-26 17:54:59 nc_0 [E] Error while synchronizing ID null: org.lsc.exception.LscServiceCommunicationException: 000020B9: SvcErr: DSID-0311045E, problem 5003 (WILL_NOT_PERFORM), data 0 10-26 17:54:59 nc_0 [D] org.lsc.exception.LscServiceCommunicationException: 000020B9: SvcErr: DSID-0311045E, problem 5003 (WILL_NOT_PERFORM), data 0 org.lsc.exception.LscServiceCommunicationException: 000020B9: SvcErr: DSID-0311045E, problem 5003 (WILL_NOT_PERFORM), data 0 at org.lsc.service.SyncReplSourceService.getNextId(SyncReplSourceService.java:317) at org.lsc.AsynchronousRunner.run(AbstractSynchronize.java:655) at java.lang.Thread.run(Thread.java:745) Hello, AD has a light support of persistent search, see https://msdn.microsoft.com/en-us/library/windows/desktop/aa772153(v=vs.85).aspx I think you could use LSC async mode with it, but only on suffix base and with (objectClass=*) filter. -- Clément OUDOT Consultant en logiciels libres, Expert infrastructure et sécurité Savoir-faire Linux 137 boulevard de Magenta - 75008 PARIS Blog: http://sflx.ca/coudot
_______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
