[389-users] Windows Sync and UserAccountControl

I setup Windows Sync between 389DS and W2008r2. Worked fine. Now we had to downgrade the Windows server to 2003 and I don't know why I can't setup the Sync again. The only error that I see in the 389-console (there is nothing in the error log) is "operations error", after creating the agreement. I sniffed the traffic between 389DS and W2003 and I saw an objectClass violation when 389 tried to add the userAccountControl atttr to a group. The group is created anyway. I've searched in the web and it looks like userAccountControl is only for users, not for groups. Looking at the Windows Sync code it looks like 389 DS always add that attribute for both. Regards, Diego -- Diego Woitasen