resetsa
Junior Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
Коллеги, все добрый день!
Подскажите, у кого нибудь работает связь групп МДаемона с Active Directory.
Я вроде все настроил, мониторинг учеток работает, но возникает такая проблема.
После того как я изменяю членство в группе, мдаемон не видит изменений, пока я не исправлю какой-нибудь атрибут в самой учетке добавляемого/изменяемого пользователя.
active.ds
Код:
; Active Directory configuration
[Options]
AuthDomain=xxx.ru
Monitor=Yes
UseUPNDomain=No
FreezeDisabled=Yes
VerboseLog=Yes
IgnoreDeleted=No
DeleteDeleted=Yes
DisableDeleted=No
FreezeDeleted=No
Frequency=60
BaseDN=LDAP://xxxdc.ru/OU=Пользователи,DC=xxx,DC=ru
SearchFilter=(objectClass=person)
PageSize=1000
UserName=
Password=
SearchScope=2
BindFlags=1
MonitorAddrBook=Yes
[Templates]
;
; Use AD attributes inside % chars to map that attribute to one of the following
; MDaemon account fields:
;
; FullName - MDaemon account's full name field
; Mailbox - MDaemon account's mailbox field
; Everything to the right of the first '@' character mapped into this field
; will be ignored.
; NTAccount - MDaemon account's network logon (for dynamic authentication)
; Note: if you are using uPNLogon=Yes do not map anything to the
; NTAccount field.
; Comments - MDaemon account's comment field
;
; You can construct templates using any combination of AD attribute names. For
; example, "FullName" by default is created using "%cn%" which is the AD attribute
; for the full name. You could achieve the same result by using "%givenName% %sn%"
; instead.
;
FullName=%sn% %givenName%
Mailbox=%userPrincipalName%
NTAccount=%SAMAccountName%
Comments=%cn%
; Uncomment this template to specify and create an alias for the new account
; Alias=%givenName%_%sn%
; Uncomment this template if you want to explicitly set the email address rather
; than let the process create it from Mailbox and MDaemon domain name
Email=%mail%
; Uncomment this template if you want to map active directory groups to MDaemon
; groups. MDaemon will check these values to see if any matches to what is
; configured in an MDaemon Group.
Groups=%memberOf%
...
{147D3D19-0ABF-4B2E-BC9E-E0EBDB2C61C2}=user@xxx.ru
...
user@xxx.ru=test@xxx.ru|...
|
|
