From 83549087b5927acd4ac2d8459970881634d5ae76 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Fri, 25 Feb 2011 17:00:24 -0500 Subject: Fix user synchronization. We need to set uidNumber and gidNumber to the magic values so that DNA can assign appropriate Ids, otherwise the synchronization of users from AD will fail with an error about posixAccount requiring a missing (uidNumber) attribute. Fixes: https://fedorahosted.org/freeipa/ticket/1020 --- daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync-conf.ldif | 2 ++ 1 file changed, 2 insertions(+) diff --git a/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync-conf.ldif b/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync-conf.ldif index e1e397f90..42026221d 100644 --- a/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync-conf.ldif +++ b/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync-conf.ldif @@ -26,3 +26,5 @@ ipaWinSyncAcctDisable: both ipaWinSyncInactivatedFilter: (&(cn=inactivated)(objectclass=groupOfNames)) ipaWinSyncActivatedFilter: (&(cn=activated)(objectclass=groupOfNames)) ipaWinSyncForceSync: true +ipaWinSyncUserAttr: uidNumber 999 +ipaWinSyncUserAttr: gidNumber 999 -- cgit