2009/10/8 Emmanuel BILLOT <emmanuel.billot(a)ird.fr>:
Hi,
We use 389DS and AD with a Winsync method.
Our LDAP DIT :
* dc=toutou,dc=fr
** dc=orleans,dc=toutou,dc=fr
*** ou=people,dc=orleans,dc=toutou,dc=fr
*** ou=group,dc=orleans,dc=toutou,dc=fr
** dc=bondy,dc=toutou,dc=fr
*** ou=people,dc=bondy,dc=toutou,dc=fr
*** ou=group,dc=bondy,dc=toutou,dc=fr
Our AD DIT :
* dc=toutou,dc=org
** ou=orleans,dc=toutou,dc=org
*** ou=utilisateurs, ou=toutou, dc=ird,dc=org
*** ou=groupes, ou=toutou,dc=ird,dc=org
One can see some OU names are different, such as DIT root.
So we cretaed a sync agrement as
ou=people,dc=orleans,dc=toutou,dc=fr --- ou=utilisateurs, ou=toutou,
dc=ird,dc=org
All seems to be ok.
However, we need to sync other subtrees, like
ou=people,dc=bondy,dc=toutou,dc=fr
It seems 389DS wants to syncronize high level entries which are not
specified in the agrement. As it tries to do it for each sub agrement,
failure occurs with a duplicate value error.
How can we do ?
Replication is set for an entire database.
So I guess you'd need to host a sub-ou on a different database to
enable a Windows sync on this particular sub-ou.
http://www.redhat.com/docs/manuals/dir-server/8.1/admin/Managing_Replicat...
Regards,
J.