2015-04-15 17:48 GMT+02:00 Kaushal Shriyan kaushalshriyan@gmail.com:

Hi Clement,

LSC, We proposed a synchronisation mechanism but was rejected since gives a lot of privileges to the OpenLDAP to change customer data in AD. the customer don't want it. Is there a way to get over with this specific use case?

You just need a read-only AD account if you need to sync from AD to OpenLDAP.

Clément.