On 07/09/2012 07:48 AM, Chris Visser wrote:
Hi,

I've got 389-ds configured and I'm busy setting up my sync agreement with my 
Windows AD server.

My AD has nested OUs e.g.
-DivisionOU1
--BranchOU
---Department1OU
---Department2OU
--Branch2OU
---Department1OU
---Department2OU

All my users and groups sit in the Department OUs and if I setup my agreement 
to sync on the Department OU it syncs the users in OU.

If I however  point it higher up in the hierarchy it doesn't go down the levels 
and sync the OUs below it.

Do I need to setup a separate agreement for each OU?  Or is there a way I can 
sync the whole DivisionOU recursively?

I tried searching on the internet for the answer, but all I come across are 
other people asking the same question and receiving no answer.

It should just work to sync at the Division level. Note that winsync will _not_ create the intermediate OU entries on the 389 side - they must already exist. What errors are you getting in your errors log?


Chris Visser
Linux/Network Infrastructure
==================
Please read our Email Disclaimer :
http://www.rtt.co.za/disclaimer.html

--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Reply via email to