Thanks for the suggestion about Google Cloud and SAML auth.   I'll look into that.

Cheers,

On 3/8/19 8:17 AM, Gordon Messmer wrote:
On 3/8/19 4:58 AM, Janet Houser wrote:
Thanks!

I read that but I can't switch to freeipa since that software doesn support a hash needed with gsync.

hmmmm......   I wonder if I could sync the user/password DB to freeipa and then use that to serve out samba shares.....


I don't think FreeIPA generates password hashes outside of the directory.  I'd expect it to store whatever hash you configure 389 DS to store, if you change that setting directly in the directory service.

On the other hand, I wouldn't recommend syncing password hashes at all.  Google Cloud supports third-party SSO using SAML 2.0. You should be able to use GCDS to sync your user accounts, and use SAML for authentication.

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

--
Dr. J.L. Houser
Senior Systems Administrator
National Solar Observatory
3665 Discovery Drive
Boulder, CO 80303
Office Phone: (303) 735-7357
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

Reply via email to