Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Force Replicate a Single Active Directory Object Programatically

Does anyone know how to Force Replicate a Single Active Directory Object Programatically?

To be clearer I want to replicate this

CN=Sample User,OU=Sample OU,DC=company,DC=com

and the whole partition like this

DC=company,DC=com

I tried DomainController.SyncReplicaFromAllServers Method but I guess its used for partitions.

like image 696
Raymund Avatar asked Dec 22 '25 07:12

Raymund


1 Answers

The direct answer is no, you can not say to the ldap server to replicate only one object. The replication always works for partition/naming context.

Active Directory has a Global Catalog, that can be used. There are bunch of attribute marked as PAS attribute (Partial Attribute Set). From every Domain Controller the PAS attribute from every object will be synced immediately to all GC server by KCC. You can read more about this in microsft document You can do the ldap searches on the GC port (3268) to find the object attributes quickly.

But if you can tell more specific details of your need that will help.

like image 148
kalyan Avatar answered Dec 23 '25 21:12

kalyan