[Freeipa-users] Sync against AD group

Hello Everyone, I've setting IPA server connect with AD (Windows Server 2012R2) and work fine, but i need change the sub-tree for user sync and this step fail (not sync anything) . For example, when i sync against the default base is ok [.................] CN=Users,DC=example2,dc=com [.................] [.................] nsds7WindowsReplicaSubtree: CN=Users,DC=example2,DC=com [.................] But i try change the base and does not sync anything [.................] CN=LAB,CN=Users,DC=example2,dc=com [.................] When the LAB is AD group. ¿is possible sync against AD group? Saludos. --- Miguel Coa M.