Re: Unidirectional Windows Sync in RedHat/Fedora Directory Server

kenneho wrote:
We're in a similar situation as the one described in
http://www.redhat.com/archives/fedora-directory-users/2008-January/msg00238.html,
in that we would like to configure Windows Sync to sync users (but
most likely not passwords) from Active Directory to RedHat/Fedora
Directory Server, but not the other way around.

Does anyone know for sure that this can be done? Is there any
documentation out there that describes how to do this?

I've done it with Sun Directory Server. Both Sun and Fedora/RH are forks of Netscape Directory Server, as well as the IDSync/WindowsSync utility. (Once upon a time there was iPlanet, which was a joint venture of Sun and AOL and which bought Netscape. When iPlanet dissolved, both kept copies of the code base. Then TimeWarner said, "What's this old AOL crap?" and sold it Red Hat, because Red Hat wanted a directory server and TimeWarner wanted to get rid of everything AOL ever touched almost as much as it wanted money. And they lived happily ever after. The End.)

You can sync in one direction, the other direction, or both.
You can pick what attributes you want to sync.
You don't have to sync passwords.
.

Relevant Pages

  • Re: Active Directory to ADAM Sync Password question
    ... You can't read passwords out of AD or sync them with ADAMSync. ... I'm confused by your statement as bind proxy objects are designed ... specifically so that you can have an object in ADAM to do a simple bind on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Openldap to AD
    ... How are the passwords stored in your OL implementation? ... I'm thinking that it may be easier to at least one-way sync from OL to AD. ... the account in both places and change passwords in both places. ... is for when I create a new account on openldap to be push to AD, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Export Passwords from AD
    ... I'm just saying it is not impossible and it is considered hacking. ... If you want to sync passwords between multiple sources, then use something like MS ILM 2007 FP1 and PCNS ... this one-by-one for users who want to use the Google account. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Event ID 2236 when trying to view .csp page, http error 500
    ... It does sound like your IWAM account's passwords are out of sync. ... Microsoft IIS ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.inetserver.iis)
  • Re: Sync Manager With SQL Express
    ... The storing of passwords was ... now I have found the sync center in Vista and scheduled a sync. ... It started the sync at the correct time, ... to schedule syncs on systems that only have SQL Server Express installed? ...
    (microsoft.public.sqlserver.replication)