Switching from synchronizing users & groups to an active directory from one openLdap into another
up vote
0
down vote
favorite
We have openLDAP and Active directory DCs we synchronize users and groups using a tool called lsc https://lsc-project.org/documentation/start.
We recently changed our openLDAP to be hosted on new machines with a new Schema.
So we need to migrate so that we are synchronizing users and groups from the new openLDAP .
So to test this ^ we created a new test DC with a test domain and we plugged the synchronization (starting with empty ou's) we do plug in the synchronization from the old openLDAP and then we plug the synchronization from the new openLDAP .
We noticed nothing has changed in terms of user IDs or permissions.
We tried to do this on the production domain controllers, but it failed miserably user Ids has changed and we don't know why.
So i was searching other ways to be able to test this but with the actual active directory database that is in production.
If anyone can point me in the right direction it would be very helpful.
We were thinking of somehow isolating one of the DCs and test the synchronization on that one (we have 4 DCs). Is that really an option ?
(all these instances (openLDAP LSC and ADs) are all hosted in GCP
active-directory openldap lsc
asked Nov 20 at 14:50
user2819161
2110
add a comment |
up vote
0
down vote
favorite
We have openLDAP and Active directory DCs we synchronize users and groups using a tool called lsc https://lsc-project.org/documentation/start.
We recently changed our openLDAP to be hosted on new machines with a new Schema.
So we need to migrate so that we are synchronizing users and groups from the new openLDAP .
So to test this ^ we created a new test DC with a test domain and we plugged the synchronization (starting with empty ou's) we do plug in the synchronization from the old openLDAP and then we plug the synchronization from the new openLDAP .
We noticed nothing has changed in terms of user IDs or permissions.
We tried to do this on the production domain controllers, but it failed miserably user Ids has changed and we don't know why.
So i was searching other ways to be able to test this but with the actual active directory database that is in production.
If anyone can point me in the right direction it would be very helpful.
We were thinking of somehow isolating one of the DCs and test the synchronization on that one (we have 4 DCs). Is that really an option ?
(all these instances (openLDAP LSC and ADs) are all hosted in GCP
active-directory openldap lsc
asked Nov 20 at 14:50
user2819161
2110
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
We have openLDAP and Active directory DCs we synchronize users and groups using a tool called lsc https://lsc-project.org/documentation/start.
We recently changed our openLDAP to be hosted on new machines with a new Schema.
So we need to migrate so that we are synchronizing users and groups from the new openLDAP .
So to test this ^ we created a new test DC with a test domain and we plugged the synchronization (starting with empty ou's) we do plug in the synchronization from the old openLDAP and then we plug the synchronization from the new openLDAP .
We noticed nothing has changed in terms of user IDs or permissions.
We tried to do this on the production domain controllers, but it failed miserably user Ids has changed and we don't know why.
So i was searching other ways to be able to test this but with the actual active directory database that is in production.
If anyone can point me in the right direction it would be very helpful.
We were thinking of somehow isolating one of the DCs and test the synchronization on that one (we have 4 DCs). Is that really an option ?
(all these instances (openLDAP LSC and ADs) are all hosted in GCP
active-directory openldap lsc
asked Nov 20 at 14:50
user2819161
2110
We have openLDAP and Active directory DCs we synchronize users and groups using a tool called lsc https://lsc-project.org/documentation/start.
We recently changed our openLDAP to be hosted on new machines with a new Schema.
So we need to migrate so that we are synchronizing users and groups from the new openLDAP .
So to test this ^ we created a new test DC with a test domain and we plugged the synchronization (starting with empty ou's) we do plug in the synchronization from the old openLDAP and then we plug the synchronization from the new openLDAP .
We noticed nothing has changed in terms of user IDs or permissions.
We tried to do this on the production domain controllers, but it failed miserably user Ids has changed and we don't know why.
So i was searching other ways to be able to test this but with the actual active directory database that is in production.
If anyone can point me in the right direction it would be very helpful.
We were thinking of somehow isolating one of the DCs and test the synchronization on that one (we have 4 DCs). Is that really an option ?
(all these instances (openLDAP LSC and ADs) are all hosted in GCP
active-directory openldap lsc
active-directory openldap lsc
asked Nov 20 at 14:50
user2819161
2110
asked Nov 20 at 14:50
user2819161
2110
asked Nov 20 at 14:50
user2819161
2110
asked Nov 20 at 14:50
user2819161
2110
asked Nov 20 at 14:50
user2819161
2110
2110
add a comment |
add a comment |
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53395597%2fswitching-from-synchronizing-users-groups-to-an-active-directory-from-one-open%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53395597%2fswitching-from-synchronizing-users-groups-to-an-active-directory-from-one-open%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
