Hi,

Ah ok, I have the "official" one.

One thing on the free site, it says the password is transmitted as clear text, 
no mention of over an encrypted secure channel....the security guys had a 
fit.....so if you update that web page it would help the cause.


regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

________________________________________
From: Rich Megginson [rmegg...@redhat.com]
Sent: Thursday, 26 July 2012 1:58 a.m.
To: Steven Jones
Cc: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] winsync msi

On 07/24/2012 03:15 PM, Steven Jones wrote:
> Hi Rich,
>
> I can appreciate what you are saying, but....
>
> Not on Windows but specifically AD, the very core of our 21,000+ user base, 
> that makes such an add on significant and gets focus. What we have seen with 
> another similar (yes, commercial) MSI was a clash with another MSI added to 
> AD, the result was not pretty....hence the Windows ppl are very careful when 
> something like this is proposed.
>
> So actually some sites where this has been installed commercially would be 
> good, if need be I can raise a call to RH support? or RH NZ rep to get that 
> info in confidence / NDA.
>
> IPA like AD is not just another application, its at the very centre of 
> everything. For us it will be the second or third most important system we 
> have.  It will probably connect us to ppl across the world and them to us 
> (via federation/shibboleth) let alone our internal user base.
>
> Lets see if I can show this, so 99.9% uptime on an application is 9 hours off 
> line per year.....per user.....say 100 users?
>
> So 1 hour off line in a business day with 21,000+ users.....21,000 hours lost 
> plus all the meetings on why and how to make sure it wont happen again.  If 
> we were down for say a day or two....it would be in the IT if not National 
> papers....(yes OK NZ is small)....I think my new occupation and some of the 
> managers would be....road sweeping.....this makes them very risk adverse.
>
> Crazy thing of course is, yes IPA is free.......
>
> ;]
>
> I can appreciate things seem very strange in that context.  Consider that its 
> taken me 7 years to go from being employed specifically long enough to get 
> rid of Redhat/linux (and Solaris) and be 100% win2000 site to having 100 RHEL 
> servers with most of the mission critical things on them.....all down to the 
> quality of open source really......proof is in the eating....its proven very 
> tasty......
Ok.  If you are a Red Hat paying customer, you should get the
RedHat-PassSync .msi from an official Red Hat channel.  We are working
on addressing this issue.
>
> :)
>
> regards
>
> Steven Jones
>
> Technical Specialist - Linux RHCE
>
> Victoria University, Wellington, NZ
>
> 0064 4 463 6272
>
> ________________________________________
> From: Rich Megginson [rmegg...@redhat.com]
> Sent: Wednesday, 25 July 2012 2:54 a.m.
> To: Steven Jones
> Cc: freeipa-users@redhat.com
> Subject: Re: [Freeipa-users] winsync msi
>
> On 07/23/2012 06:32 PM, Steven Jones wrote:
>> Hi,
>>
>> No not specific developers but some sort of statement of ownership from 
>> RedHat I suppose. So they are I assume looking for some sort of confidence 
>> that it wont trash AD and if I install it and it does trash our AD some 
>> liability.
> Can you point me at another open source project that provides Windows
> binaries that provides some sort of guarantee or statement or
> documentation like this?  I'd like to see what other projects do and
> provide something similar.
>
> Or is this the first (and only?) time anyone in your organization has
> ever installed any open source software on Windows?
>
>> regards
>>
>> Steven Jones
>>
>> Technical Specialist - Linux RHCE
>>
>> Victoria University, Wellington, NZ
>>
>> 0064 4 463 6272
>>
>> ________________________________________
>> From: Rich Megginson [rmegg...@redhat.com]
>> Sent: Tuesday, 24 July 2012 12:11 p.m.
>> To: Steven Jones
>> Cc: freeipa-users@redhat.com
>> Subject: Re: [Freeipa-users] winsync msi
>>
>> On 07/23/2012 05:38 PM, Steven Jones wrote:
>>> Hi,
>>>
>>> For the winsync agreement my Windows and security teams want to know its 
>>> details,
>>>
>>> eg who wrote it,
>> Red Hat - do you need to know the names of the developers?
>>
>>> it is Microsoft certified etc.
>> Not that I know of - how would one go about doing that?
>>> Where will I find such info?
>>>
>>> All I have is
>>>
>>> http://port389.org/wiki/Download
>>>
>>> Which doesn't tell me much.
>> There is more info in the actual .msi file.
>>> regards
>>>
>>> Steven Jones
>>>
>>> Technical Specialist - Linux RHCE
>>>
>>> Victoria University, Wellington, NZ
>>>
>>> 0064 4 463 6272
>>>
>>> _______________________________________________
>>> Freeipa-users mailing list
>>> Freeipa-users@redhat.com
>>> https://www.redhat.com/mailman/listinfo/freeipa-users
>>
>>
>> _______________________________________________
>> Freeipa-users mailing list
>> Freeipa-users@redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users




_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to