connector/s4/autostart: yes connector/s4/ldap/base: DC=firma,DC=DE The LDAP base DN of the Samba 4 server. connector/s4/ldap/host: ucs.firma.de The fully qualified domain name of the Samba 4 server. connector/s4/ldap/port: 389 The port of the LDAP service of the Samba 4 server connector/s4/ldap/protocol: ldapi connector/s4/ldap/socket: /var/lib/samba/private/ldap_priv/ldapi connector/s4/ldap/ssl: no connector/s4/listener/dir: /var/lib/univention-connector/s4 Directory in which the objects transferred from UCS to Samba 4 are stored, preset as /var/lib/univention-connector/ad. The corresponding listener module saves the changes in this path; it should thus not be altered. connector/s4/mapping/container/ignorelist: mail,kerberos,MicrosoftDNS Defines a comma separated list of containers which will be ignored by the connector (default is mail,kerberos,MicrosoftDNS) connector/s4/mapping/dns/ignorelist: DC=_ldap._tcp.Default-First-Site-Name._site Defines a comma separated list of DNS objects which will be ignored by the connector (default is DC=_ldap._tcp.Default-First-Site-Name._site) connector/s4/mapping/gpo: true Defines whether the MS GPOs should be synchronized (Default: true) connector/s4/mapping/group/ignorelist: Windows Hosts,Authenticated Users,World Authority,Everyone,Null Authority,Nobody Defines a comma separated list of groups whom will be ignored by the connector (default is Windows Hosts,Authenticated Users,World Authority,Everyone,Null Authority,Nobody) connector/s4/mapping/group/language: en connector/s4/mapping/group/table/Domain Admins: Domänen-Admins A static list mapping group names in UCS-LDAP to group names in the Samba 4 user directory. Group names in UCS-LDAP are always English. The mapping "connector/s4/mapping/group/table/'Domain Users'=Domänen-Benutzer" e.g. advises the S4 Connector to synchronize a group object called "Domain Users" in UCS-LDAP with a group object called "Domänen-Benutzer" in the Samba 4 user directory. connector/s4/mapping/group/table/Domain Guests: Domänen-Gäste A static list mapping group names in UCS-LDAP to group names in the Samba 4 user directory. Group names in UCS-LDAP are always English. The mapping "connector/s4/mapping/group/table/'Domain Users'=Domänen-Benutzer" e.g. advises the S4 Connector to synchronize a group object called "Domain Users" in UCS-LDAP with a group object called "Domänen-Benutzer" in the Samba 4 user directory. connector/s4/mapping/group/table/Domain Users: Domänen-Benutzer A static list mapping group names in UCS-LDAP to group names in the Samba 4 user directory. Group names in UCS-LDAP are always English. The mapping "connector/s4/mapping/group/table/'Domain Users'=Domänen-Benutzer" e.g. advises the S4 Connector to synchronize a group object called "Domain Users" in UCS-LDAP with a group object called "Domänen-Benutzer" in the Samba 4 user directory. connector/s4/mapping/group/table/Windows Hosts: Domain Computers A static list mapping group names in UCS-LDAP to group names in the Samba 4 user directory. Group names in UCS-LDAP are always English. The mapping "connector/s4/mapping/group/table/'Domain Users'=Domänen-Benutzer" e.g. advises the S4 Connector to synchronize a group object called "Domain Users" in UCS-LDAP with a group object called "Domänen-Benutzer" in the Samba 4 user directory. connector/s4/mapping/sid: true Defines whether the SID should be synchronized (Default: true) connector/s4/mapping/syncmode: sync Defines the synchronisation mode; "read" (reading only from Samba 4 to UCS), "write" (writing only from UCS to Samba 4) and "sync" (bidirectional synchronisation) are supported. connector/s4/mapping/user/ignorelist: root,pcpatch,ucs-s4sync,Gast,Guest,Gast,Guest,Gast,Guest Defines a comma separated list of users whom will be ignored by the connector (default is root,pcpatch,ucs-s4sync) connector/s4/poll/sleep: 1 Time in seconds which is waited after a run without changes until the next request is made. Only new files are searched for locally in the directory named above; a LDAP request is made on the Samba 4 side. connector/s4/retryrejected: 2 Number of requests without new changes after which an attempt is made to import retained changes subsequently. This procedure can be followed in the /var/log/univention/connector-status.log logfile.