Bug 1206306

Summary:	winsync - delete all members on AD/DS, if the other side has members which are in scope but not being sync'ed, the members are also deleted.
Product:	Red Hat Enterprise Linux 7	Reporter:	Noriko Hosoi <nhosoi>
Component:	389-ds-base	Assignee:	Noriko Hosoi <nhosoi>
Status:	CLOSED WONTFIX	QA Contact:	Viktor Ashirov <vashirov>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	nkinder, rmeggins
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-11-10 00:08:52 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Noriko Hosoi 2015-03-26 18:11:08 UTC

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/389/ticket/47464

See also ticket #415.

Replying to [comment:15 rmeggins]:
> We can do these later:
> 
> * As Rich pointed out, there are more cases this patch does not fix: e.g, a pseudo user in the sync scope but not being sync'ed would be deleted, which should not be.
> * To learn if an entry is in the scope is sync'ed or not, map_entry_dn_inbound would provide us the answer, which requires an entire entry. I.e., we need to search all the members to determine we could delete it or not. Would it be acceptable?

Comment 3 Noriko Hosoi 2016-01-04 19:58:32 UTC

Not a customer issue.

Comment 4 Noriko Hosoi 2016-11-10 00:08:52 UTC

No requests from customers/community.

Per triage, set to closed/wontfix.