Re: [Freeipa-users] MemberOf plugin keeps disabling account

2010-03-18 Thread James Roman
Just for posterity. The issue ended up being that the AD and FreeIPA were out of sync. One of the sub-containers in the Active Directory containing disabled accounts was moved outside of the scope of the sync agreement. We never ran a replica init, so a number of scheduled syncs were pending.

Re: [Freeipa-users] MemberOf plugin keeps disabling account

2010-03-18 Thread Rob Crittenden
James Roman wrote: Just for posterity. The issue ended up being that the AD and FreeIPA were out of sync. One of the sub-containers in the Active Directory containing disabled accounts was moved outside of the scope of the sync agreement. We never ran a replica init, so a number of scheduled

[Freeipa-users] Password Attribute Syncing Support

2010-03-18 Thread Walter Meyer
I am testing out FreeIPA and am wondering if FreeIPA is compatible with the Google Apps password sync utility. Specifically my question in relation to FreeIPA is how the password attribute is stored in the DS? Is it in any of these Google Apps supported formats: MD5, SHA1, or Plain Text? If not

Re: [Freeipa-users] Password Attribute Syncing Support

2010-03-18 Thread Rob Crittenden
Walter Meyer wrote: I am testing out FreeIPA and am wondering if FreeIPA is compatible with the Google Apps password sync utility. Specifically my question in relation to FreeIPA is how the password attribute is stored in the DS? Is it in any of these Google Apps supported formats: MD5, SHA1,