Q&A: Is it possible to exclude subtrees from getting synced with samba?

Exclude subtrees from s4-sync

Question

Is it possible to exclude subtrees from getting synced with samba?

Answer

Yes, you can add multiple subtrees as ucr-variable with the following command:

connector/ad/mapping/ignoresubtree/computer: cn=computers,dc=example,dc=com
connector/ad/mapping/ignoresubtree/special_users: cn=special_users,dc=example,dc=com

After that, you need to restart your s4-connector with

root@example:~# /etc/init.d/univention-s4-connector restart
[ ok ] Restarting univention-s4-connector (via systemctl): univention-s4-connector.service.
Mastodon