ucr set connector/ad/mapping/container/ignorelist=mail,kerberos,computers
The names of LDAP containers specified here are not synchronised by the connector. Multiple values need to be separated by commas. The cn= part is not needed. E.g. to ignore 'cn=mail' simply specify 'mail'.
But this variable seems not be used in any template file. The change had no noticeable effect.
@Grandjean: Thank you for your suggestion. It looks like this should work. Unfortunately this variable does not exist on my system but a rather strange one named con.*/ad/mapping/computer/syncmode:
root@kepler:~# ucr search syncmode
Defines the synchronisation mode for computer objects between the <abbr title="Univention Corporate Server">UCS</abbr> LDAP and Active Directory. The following values are supported: 'read' (Only changes in Active Directory are synchronised to <abbr title="Univention Corporate Server">UCS</abbr> LDAP), 'write' (Only changes in <abbr title="Univention Corporate Server">UCS</abbr> LDAP are synchronised to Active Directory) and 'sync' (bidirectional synchronisation, changes in both directory services are synchronised). If this variable is not set, the value of connector/ad/mapping/syncmode will be used.
A ucr get, ucr set or ucr info on con.*/ad/mapping/computer/syncmode does not work. Can someone help with this behaviour?