On Wed, 23 May 2012 15:16:03 +0000, adnowak wrote:

> I'm working on a IDM project implemented by another company. On e
> eDirectory driver, they synchronized GUID attribut.

Synchronized? Or you're seeing it in the filter?

If it's in the filter, that's (probably) ok, because it's supposed to be
there by default and is needed for association processing.

If they're actually synchronizing the GUID value between trees, though,
that's REALLY bad. You do NOT want to do that.

> What's the best practice for this topic?

The default filter is correct for GUID. Don't change it.

David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.novell.com

Please post questions in the forums. No support provided via email.