Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Absent Member.
Absent Member.
346 views

enable or disable User sync from AD to eDir


Dear,



I have one question and hope you can help me. I dont know where in the ADDriver can I enable or disable the User/group sync from AD to Indentity Fault (eDIR).



Thank you very much and



best regards



Martin
Labels (1)
0 Likes
4 Replies
Knowledge Partner Knowledge Partner
Knowledge Partner

mehlers;2489408 wrote:
Dear,



I have one question and hope you can help me. I dont know where in the ADDriver can I enable or disable the User/group sync from AD to Indentity Fault (eDIR).



Thank you very much and



best regards



Martin



Depends on exactly what you want to do, but generally you could do this by editing the Filter and un-selecting the object class you do not want.
0 Likes
Absent Member.
Absent Member.


I find it - Thank you very much!




Best regards




Martin








>>> dgersic<dgersic@no-mx.forums.microfocus.com> schrieb am Mittwoch, 24. Oktober 2018 um 16:54:







mehlers;2489408 Wrote:


> Dear,



>



>



>



> I have one question and hope you can help me. I dont know where in the



> ADDriver can I enable or disable the User/group sync from AD to



> Indentity Fault (eDIR).



>



>



>



> Thank you very much and



>



>



>



> best regards



>



>



>



> Martin








Depends on exactly what you want to do, but generally you could do this

by editing the Filter and un-selecting the object class you do not

want.







--

dgersic

------------------------------------------------------------------------
dgersic's Profile: https://forums.novell.com/member.php?userid=5209


View this thread: https://forums.novell.com/showthread.php?t=509820
0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Your thread subject makes me want to know about enabling/disabling users
and synchronizing that state, but your other text makes me think you just
want to know about user/group membership sync.

With the microsoft active directory (MAD) driver config the easiest way to
enable or disable group membership sync, assuming you are not doing
anything with entitlements (probably not based on your question), is to go
to the Filter and then set the Group's 'Member' attribute to Ignore in
which ever direction, or Sync in whichever direction, to disable or enable
sync in that direction, respectively.

eDirectory keeps attributes on both sides (user and group) but MAD only
lets you set it on the group side (the user side is basically the result
of a query each time you access the user, and the tools magically modify
the group whenever you try to change membership on the user side).

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
Absent Member.
Absent Member.



I find it - Thank you very much!




Best regards




Martin






>>> ab<ab@no-mx.forums.microfocus.com> schrieb am Mittwoch, 24. Oktober 2018 um 17:00:



Your thread subject makes me want to know about enabling/disabling users

and synchronizing that state, but your other text makes me think you just

want to know about user/group membership sync.




With the microsoft active directory (MAD) driver config the easiest way to

enable or disable group membership sync, assuming you are not doing

anything with entitlements (probably not based on your question), is to go

to the Filter and then set the Group's 'Member' attribute to Ignore in

which ever direction, or Sync in whichever direction, to disable or enable

sync in that direction, respectively.




eDirectory keeps attributes on both sides (user and group) but MAD only

lets you set it on the group side (the user side is basically the result

of a query each time you access the user, and the tools magically modify

the group whenever you try to change membership on the user side).




--

Good luck.




If you find this post helpful and are logged into the web interface,

show your appreciation and click on the star below.




If you want to send me a private message, please let me know in the

forum as I do not use the web interface often.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.