Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-22 Thread Rob Crittenden
Walter Meyer wrote: Thanks for all of the tips. I am wondering what the best way to modify the ldap (so I can change the password scheme) is. I tried getting the 389-console utility setup to connect but was unsuccesful. Should I just use the command line ldap tools? We don't configure things

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-21 Thread Walter Meyer
Thanks for all of the tips. I am wondering what the best way to modify the ldap (so I can change the password scheme) is. I tried getting the 389-console utility setup to connect but was unsuccesful. Should I just use the command line ldap tools? On Mar 19, 2010, at 4:43 PM, Rob Crittenden

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Walter Meyer
Sorry I should have linked to the manual for it: http://www.postini.com/webdocs/gads/admin The Google Apps utility actually syncs passwords from LDAP to Google Apps, not the other way around. The manual says that the utility supports password attributes in MD5, SHA1, or Clear Text. So I am

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Dmitri Pal
Walter Meyer wrote: Sorry I should have linked to the manual for it: http://www.postini.com/webdocs/gads/admin The Google Apps utility actually syncs passwords from LDAP to Google Apps, not the other way around. The manual says that the utility supports password attributes in MD5, SHA1, or

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Rob Crittenden
Dmitri Pal wrote: Walter Meyer wrote: Sorry I should have linked to the manual for it: http://www.postini.com/webdocs/gads/admin The Google Apps utility actually syncs passwords from LDAP to Google Apps, not the other way around. The manual says that the utility supports password attributes in

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Dmitri Pal
Walter Meyer wrote: We would be using Google Apps for our email system (and other services included with GA like Google Docs etc.) I'd like to have one password for users when they access their email via Google Apps, ideally the users and passwords would be centralized in IPA. According to

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Simo Sorce
On Thu, 18 Mar 2010 19:47:35 -0400 Walter Meyer wgme...@gmail.com wrote: Sorry I should have linked to the manual for it: http://www.postini.com/webdocs/gads/admin The Google Apps utility actually syncs passwords from LDAP to Google Apps, not the other way around. The manual says that the

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Walter Meyer
I will see if Salted SHA1 is supported and maybe Google hasn't documented it yet. If not, the sync is done with the Google Servers over SSL. And if only the Directory Manager can read the userPassword attribute, would storing the userPassword attribute in SHA1 be that insecure? What scenario could

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Rob Crittenden
Dmitri Pal wrote: Walter Meyer wrote: We would be using Google Apps for our email system (and other services included with GA like Google Docs etc.) I'd like to have one password for users when they access their email via Google Apps, ideally the users and passwords would be centralized in IPA.

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Rob Crittenden
Walter Meyer wrote: I will see if Salted SHA1 is supported and maybe Google hasn't documented it yet. If not, the sync is done with the Google Servers over SSL. And if only the Directory Manager can read the userPassword attribute, would storing the userPassword attribute in SHA1 be that

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-19 Thread Walter Meyer
Google Apps uses its own user database, as of now there is no way to direct it to a backend one, so the only option is to sync with the Google Apps database. On Fri, Mar 19, 2010 at 4:28 PM, Rob Crittenden rcrit...@redhat.com wrote: Dmitri Pal wrote: Walter Meyer wrote: We would be using

[Freeipa-users] Password Attribute Syncing Support

2010-03-18 Thread Walter Meyer
I am testing out FreeIPA and am wondering if FreeIPA is compatible with the Google Apps password sync utility. Specifically my question in relation to FreeIPA is how the password attribute is stored in the DS? Is it in any of these Google Apps supported formats: MD5, SHA1, or Plain Text? If not

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-18 Thread Rob Crittenden
Walter Meyer wrote: I am testing out FreeIPA and am wondering if FreeIPA is compatible with the Google Apps password sync utility. Specifically my question in relation to FreeIPA is how the password attribute is stored in the DS? Is it in any of these Google Apps supported formats: MD5, SHA1,