On 04/06/2011 07:02 PM, Diego Woitasen wrote:
I setup Windows Sync between 389DS and W2008r2. Worked
fine. Now we had to downgrade the Windows server to 2003 and I
don't know why I can't setup the Sync again. The only error that I
see in the 389-console (there is nothing in the error log) is
"operations error", after creating the agreement.
I sniffed the traffic between 389DS and W2003 and I saw an
objectClass violation when 389 tried to add the
userAccountControl atttr to a group. The group is created
anyway.
I've searched in the web and it looks like userAccountControl
is only for users, not for groups. Looking at the Windows Sync
code it looks like 389 DS always add that attribute for both.