389DS Windows sync and group members

Posted on

Hi
By following the administration guide for RHDS. I have setup windows synchronization with one way sync : from Windows
I have also enabled replication of POSIX attributes
I have created Winsync Agreements for users OU (--ds-subtree="ou=people,dc=example,dc=com")
and one for groups OU (--ds-subtree="ou=groups,dc=example,dc=com").

posixwinsynccreatememberoftask: false
posixwinsynclowercaseuid: false
posixwinsyncmapmemberuid: true
posixwinsyncmapnestedgrouping: false
posixwinsyncmssfuschema: false

Both have :
nsds7NewWinGroupSyncEnabled: on
nsds7NewWinUserSyncEnabled: on

Users are replicated and groups too, but there are no uniqueMember in the groups.
dn: cn=f-1111,ou=groups,dc=example,dc=com
objectclass: top
objectclass: groupofuniquenames
objectclass: ntGroup
objectclass: posixGroup
ntGroupDeleteGroup: true
cn: f-1111
ntUserDomainId: f-1111
ntGroupType: -2147483646
ntUniqueId: 8c39975e80f5db4b8a9aa9690a7899b4
gidNumber: 5434282

If a group has another group then that group show up as a uniqueMember, but not the users in the members list.
Are there more settings that needs to be changed?

Q2
Is it the plugin posix-winsync set --create-memberof-task that convert uniqueMember to memberUid in the groups?

OS is RHEL 8.0 and rpms: 389-ds-base Version : 1.4.1.3

TF

Responses