Original setup was TREE1 and TREE2 both eDir drivers setup as Bi-Directional
and all was well. Full two way synchronization of user data and passwords
worked. These drivers have been setup by importing the driver config
eDirectory.XML

I changed TREE1 driver to Authoritative and new/modify accounts in TREE1 do
replicate to TREE2 (including passwords). Of course, TREE2 create/modifies
do not reach TREE1.

How do I modify the TREE1 driver to accept passwords from TREE2 but that
other account creation/modification/deletion requests from TREE2 are ignored
?

I've tried various things but no success and haven't found a relevant TID or
post.

If this is easy, please let me know. Otherwise, can you point me in the
right direction?

Thank you,
Marc