Hi, Ah ok, I have the "official" one.
One thing on the free site, it says the password is transmitted as clear text, no mention of over an encrypted secure channel....the security guys had a fit.....so if you update that web page it would help the cause. regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ________________________________________ From: Rich Megginson [rmegg...@redhat.com] Sent: Thursday, 26 July 2012 1:58 a.m. To: Steven Jones Cc: firstname.lastname@example.org Subject: Re: [Freeipa-users] winsync msi On 07/24/2012 03:15 PM, Steven Jones wrote: > Hi Rich, > > I can appreciate what you are saying, but.... > > Not on Windows but specifically AD, the very core of our 21,000+ user base, > that makes such an add on significant and gets focus. What we have seen with > another similar (yes, commercial) MSI was a clash with another MSI added to > AD, the result was not pretty....hence the Windows ppl are very careful when > something like this is proposed. > > So actually some sites where this has been installed commercially would be > good, if need be I can raise a call to RH support? or RH NZ rep to get that > info in confidence / NDA. > > IPA like AD is not just another application, its at the very centre of > everything. For us it will be the second or third most important system we > have. It will probably connect us to ppl across the world and them to us > (via federation/shibboleth) let alone our internal user base. > > Lets see if I can show this, so 99.9% uptime on an application is 9 hours off > line per year.....per user.....say 100 users? > > So 1 hour off line in a business day with 21,000+ users.....21,000 hours lost > plus all the meetings on why and how to make sure it wont happen again. If > we were down for say a day or two....it would be in the IT if not National > papers....(yes OK NZ is small)....I think my new occupation and some of the > managers would be....road sweeping.....this makes them very risk adverse. > > Crazy thing of course is, yes IPA is free....... > > ;] > > I can appreciate things seem very strange in that context. Consider that its > taken me 7 years to go from being employed specifically long enough to get > rid of Redhat/linux (and Solaris) and be 100% win2000 site to having 100 RHEL > servers with most of the mission critical things on them.....all down to the > quality of open source really......proof is in the eating....its proven very > tasty...... Ok. If you are a Red Hat paying customer, you should get the RedHat-PassSync .msi from an official Red Hat channel. We are working on addressing this issue. > > :) > > regards > > Steven Jones > > Technical Specialist - Linux RHCE > > Victoria University, Wellington, NZ > > 0064 4 463 6272 > > ________________________________________ > From: Rich Megginson [rmegg...@redhat.com] > Sent: Wednesday, 25 July 2012 2:54 a.m. > To: Steven Jones > Cc: email@example.com > Subject: Re: [Freeipa-users] winsync msi > > On 07/23/2012 06:32 PM, Steven Jones wrote: >> Hi, >> >> No not specific developers but some sort of statement of ownership from >> RedHat I suppose. So they are I assume looking for some sort of confidence >> that it wont trash AD and if I install it and it does trash our AD some >> liability. > Can you point me at another open source project that provides Windows > binaries that provides some sort of guarantee or statement or > documentation like this? I'd like to see what other projects do and > provide something similar. > > Or is this the first (and only?) time anyone in your organization has > ever installed any open source software on Windows? > >> regards >> >> Steven Jones >> >> Technical Specialist - Linux RHCE >> >> Victoria University, Wellington, NZ >> >> 0064 4 463 6272 >> >> ________________________________________ >> From: Rich Megginson [rmegg...@redhat.com] >> Sent: Tuesday, 24 July 2012 12:11 p.m. >> To: Steven Jones >> Cc: firstname.lastname@example.org >> Subject: Re: [Freeipa-users] winsync msi >> >> On 07/23/2012 05:38 PM, Steven Jones wrote: >>> Hi, >>> >>> For the winsync agreement my Windows and security teams want to know its >>> details, >>> >>> eg who wrote it, >> Red Hat - do you need to know the names of the developers? >> >>> it is Microsoft certified etc. >> Not that I know of - how would one go about doing that? >>> Where will I find such info? >>> >>> All I have is >>> >>> http://port389.org/wiki/Download >>> >>> Which doesn't tell me much. >> There is more info in the actual .msi file. >>> regards >>> >>> Steven Jones >>> >>> Technical Specialist - Linux RHCE >>> >>> Victoria University, Wellington, NZ >>> >>> 0064 4 463 6272 >>> >>> _______________________________________________ >>> Freeipa-users mailing list >>> Freeipaemail@example.com >>> https://www.redhat.com/mailman/listinfo/freeipa-users >> >> >> _______________________________________________ >> Freeipa-users mailing list >> Freeipafirstname.lastname@example.org >> https://www.redhat.com/mailman/listinfo/freeipa-users > > > > _______________________________________________ > Freeipa-users mailing list > Freeipaemail@example.com > https://www.redhat.com/mailman/listinfo/freeipa-users _______________________________________________ Freeipa-users mailing list Freeipafirstname.lastname@example.org https://www.redhat.com/mailman/listinfo/freeipa-users