[Fedora-directory-users] FDS to AD sync weirdness ... CN changes, unique constraints.

[Elías Halldór Ágústsson <elias hi is>]

We are experimenting with Fedora Directory Server and trying to sync it 
to AD.

Setting up SSL for both and initiating sync was successful.

However, it seems that DN in AD is constructed from the CN, which is the 
full name. However, that's neigh impossible, since DN has a unique 
constraint, but full names are seldom unique, and particularly not here 
in Iceland. For example, my organization has at least 10 people called 
"Kristín Jónsdóttir".

I regard AD as broken by design in this regard. My question is, can this 
be fixed? What would be the right way to approach this problem?

--
Elías Halldór Ágústsson       | Elias Halldor Agustsson
Unix Kerfisstjóri             | Unix Systems Administrator
Reiknistofnun Háskóla Íslands | University of Iceland Computing Services
http://elias.rhi.hi.is/       | +354 525 4903