Hide Forgot
In RHDS 8.2 (and 9.0 AFAIK), the only way to specify which attributes to synchronise from AD into RHDS is via writing a plugin (like IPA's ipa-winsync.c). It would be really nice to be able to configure, per sync agreement, which attributes should and should not be synchronised (and maybe even define the map between AD attribute names and RHDS attribute names).
Upstream ticket: https://fedorahosted.org/389/ticket/179
please add link to design and implementation documentation when ready.
clearing needinfo
Per triage, set to FUTURE.
We do not plan to enhance winsync to allow the synchronized attributes to be configurable. For IdM, we recommend using Trusts. For RHDS, custom plugins can be written if needed. Closing as WONTFIX.