[Freeipa-users] Has one successfully synched the entirety of their AD to IPA (multiple OUs and or Subtrees)

2014-03-17 Thread Todd Maugh
I'm trying to sync all of my AD to IPA, I don't need to retain any of the original windows directory structure once in IPA. I cannot find where to set ipaWinSyncUserFlatten to true (so I'm assuming it's on true by default) I really need to be able to sync more than just the cn=users subtree

Re: [Freeipa-users] Has one successfully synched the entirety of their AD to IPA (multiple OUs and or Subtrees)

2014-03-17 Thread Rich Megginson
On 03/17/2014 03:33 PM, Todd Maugh wrote: I'm trying to sync all of my AD to IPA, I don't need to retain any of the original windows directory structure once in IPA. I cannot find where to set ipaWinSyncUserFlatten to true (so I'm assuming it's on true by default) Yes, it is true by

Re: [Freeipa-users] Has one successfully synched the entirety of their AD to IPA (multiple OUs and or Subtrees)

2014-03-17 Thread Todd Maugh
Thanks Rich, I am able to create a successful winsync agreement from the top level. Unfortunately, when I do this. I do not see any of the accounts from the sub trees populate my ipa server. Is it possible to have all the subtrees (ous) live under cn=users. If I make this change to AD would

Re: [Freeipa-users] Has one successfully synched the entirety of their AD to IPA (multiple OUs and or Subtrees)

2014-03-17 Thread Rich Megginson
On 03/17/2014 03:52 PM, Todd Maugh wrote: Thanks Rich, I am able to create a successful winsync agreement from the top level. Unfortunately, when I do this. I do not see any of the accounts from the sub trees populate my ipa server. Ok, so it doesn't work. Is it possible to have all the

Re: [Freeipa-users] Has one successfully synched the entirety of their AD to IPA (multiple OUs and or Subtrees)

2014-03-17 Thread Todd Maugh
Thanks again Rich is there some good Documentation on setting up the trust? From: Rich Megginson [mailto:rmegg...@redhat.com] Sent: Monday, March 17, 2014 3:03 PM To: Todd Maugh; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Has one successfully synched the entirety of their AD to IPA

Re: [Freeipa-users] Has one successfully synched the entirety of their AD to IPA (multiple OUs and or Subtrees)

2014-03-17 Thread Dmitri Pal
On 03/17/2014 06:04 PM, Todd Maugh wrote: Thanks again Rich is there some good Documentation on setting up the trust? http://www.freeipa.org/page/IPAv3_testing_AD_trust *From:*Rich Megginson [mailto:rmegg...@redhat.com] *Sent:* Monday, March 17, 2014 3:03 PM *To:* Todd Maugh;

Re: [Freeipa-users] Has one successfully synched the entirety of their AD to IPA (multiple OUs and or Subtrees)

2014-03-17 Thread Rich Megginson
On 03/17/2014 04:04 PM, Todd Maugh wrote: Thanks again Rich is there some good Documentation on setting up the trust? I'm not familiar with trust. There are other folks in the IPA community who are. *From:*Rich Megginson [mailto:rmegg...@redhat.com] *Sent:* Monday, March 17, 2014 3:03