The Active Directory Connector was extended several months ago with advanced filter rules, making it easier to configure synchronization for only specific parts of the directory service. With the latest update, parent containers can now also be synchronized automatically when performing such partial synchronizations of the LDAP tree. This significantly reduces configuration effort, especially in complex, dynamic scenarios. In the Univention Directory Manager, user and computer objects can now automatically be assigned to the group stored in their 'parent container' when they are created. Previously, the default primary group could only be set globally. This new feature is the first step toward handling objects differently depending on their position in the LDAP database, and eventually also administering them with different permissions.
Official announcement
Download Univention Corporate Server
