Synchronizing group membership
Novell Cool Solutions: Question & Answer
Reader Rating 
Q:
I'd like to synchronize users from one eDirectory to another, including the user attribute "Group Membership." Is this possible without also synching groups? My goal is to preserve the group membership attribute for use in creating dynamic groups in the receiving tree.
A:
No. Group Membership is a DN syntax attribute and has to refer to a live object - a real object in the destination tree. You could, however, synchronize group membership in one tree to some string syntax attribute in the destination tree as follows:
1. Create a schema mapping rule on one side or the other that maps Group Membership to the other attribute.
2. Create an input transformation on the destination tree (or an output transformation on the source tree) that converts the type of the value for that attribute from DN to string.
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com