Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-26 Thread Rob Crittenden
Dmitri Pal wrote: On 02/25/2015 05:39 PM, Hugh wrote: On 2/25/2015 3:11 PM, Dmitri Pal wrote: I think you can start with adding ntUser object class into the list of the object classes in the IPA configuration in UI. That would apply it to the new entries automatically. How is that done? I'd

[Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Hugh
All, We're running ipa-server-3.0.0-42/389-ds-base-1.2.11.15-48 on CentOS 6.5. We've set up synching between our IPA and AD and that seems to be working. What we'd like to do now is allow admins when they're creating users in IPA to be able to set those users up for synching to AD with the web UI

Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Petr Vobornik
On 02/25/2015 09:12 AM, Hugh wrote: All, We're running ipa-server-3.0.0-42/389-ds-base-1.2.11.15-48 on CentOS 6.5. We've set up synching between our IPA and AD and that seems to be working. What we'd like to do now is allow admins when they're creating users in IPA to be able to set those users

Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Dmitri Pal
On 02/25/2015 09:53 AM, Petr Vobornik wrote: On 02/25/2015 09:12 AM, Hugh wrote: All, We're running ipa-server-3.0.0-42/389-ds-base-1.2.11.15-48 on CentOS 6.5. We've set up synching between our IPA and AD and that seems to be working. What we'd like to do now is allow admins when they're

Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Hugh
On 2/25/2015 11:02 AM, Dmitri Pal wrote: But let us step back and ask the question why do you need to create the users you sync manually first? The users in a specific OU will be synced anyways without you manually creating them in IPA. So this is unclear why the whole thing is actually

Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Dmitri Pal
On 02/25/2015 01:22 PM, Hugh wrote: On 2/25/2015 11:02 AM, Dmitri Pal wrote: But let us step back and ask the question why do you need to create the users you sync manually first? The users in a specific OU will be synced anyways without you manually creating them in IPA. So this is unclear why

Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Dmitri Pal
On 02/25/2015 02:15 PM, Hugh wrote: On 2/25/2015 12:50 PM, Dmitri Pal wrote: Will all users created via IPA interface synched to AD? Is there any harm to make all users be created with the attributes mentioned earlier in this thread? Almost all. We have some users that will be role accounts

Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Hugh
On 2/25/2015 3:11 PM, Dmitri Pal wrote: I think you can start with adding ntUser object class into the list of the object classes in the IPA configuration in UI. That would apply it to the new entries automatically. How is that done? I'd rather not have to tweak the package files, since that

Re: [Freeipa-users] Web UI plugins or other extensions

2015-02-25 Thread Dmitri Pal
On 02/25/2015 05:39 PM, Hugh wrote: On 2/25/2015 3:11 PM, Dmitri Pal wrote: I think you can start with adding ntUser object class into the list of the object classes in the IPA configuration in UI. That would apply it to the new entries automatically. How is that done? I'd rather not have to