Right now, our ID Vault (eDir) has all users in:

ou=users,o=ABC

It syncs to AD in the:
abc.com
-> Users

container (I think it's like: cn=users,dc=abc,dc=com)

The driver matching policy (remote loader, so I'm looking at the
subscriber channel) shows that it's matching on:

entry

I see the choices are:

entry
suboordinates
subtree

What if we make another "top level" dc in AD:

abc.com
-> test

and we MOVE users from cn=users,dc=abc,dc=com to cn=test,dc=abc,dc=com
via the AD Users and Groups MMC?

Will the changes after that (if we modify something of a user in eDir)
be synced over?

I would think that the matching policy would not find a match because
it's set to look specifically in the cn=user,dc=abc,dc=com container?

But the docs kinda indicate otherwise for a synchronization event.


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: http://forums.novell.com/member.php?userid=734
View this thread: http://forums.novell.com/showthread.php?t=365681