Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2015-03-17 Thread Dan
Thomas Raehalme writes: > > Hi, > > Previously we have used Atlassian Crowd as a source for user data in > various applications, both in-house built and proprietary such as JIRA > or Confluence. As we have deployed FreeIPA, I would like to start > using it as the identity source. Unfortunately

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Jakub Hrozek
On Thu, Sep 12, 2013 at 04:18:49PM +0300, Thomas Raehalme wrote: > Hi! > > On Thu, Sep 12, 2013 at 4:06 PM, Martin Kosek wrote: > > I was just referring to fact, that when a system or application uses LDAP > > as an > > identity and authentication source, it often use simple LDAP Bind operation

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Martin Kosek
On 09/12/2013 08:29 PM, Thomas Raehalme wrote: Hi! On Thu, Sep 12, 2013 at 4:33 PM, Martin Kosek wrote: Well, LDAP is the data backend for all FreeIPA identity data, you can certainly use plain LDAP binds with them (though Kerberos/GSSAPI auth is preferred). # ldapsearch -h `hostname` -D "uid=

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Thomas Raehalme
Hi! On Thu, Sep 12, 2013 at 4:06 PM, Martin Kosek wrote: > I was just referring to fact, that when a system or application uses LDAP as > an > identity and authentication source, it often use simple LDAP Bind operation > (i.e. accessing LDAP with user+password or) when testing if the user access

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Thomas Raehalme
Hi! On Thu, Sep 12, 2013 at 4:33 PM, Martin Kosek wrote: > Well, LDAP is the data backend for all FreeIPA identity data, you can > certainly > use plain LDAP binds with them (though Kerberos/GSSAPI auth is preferred). > # ldapsearch -h `hostname` -D > "uid=jdoe,cn=users,cn=accounts,dc=example,d

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Chris Hudson
er 12, 2013 8:54:59 AM > Subject: Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd > party applications > Hi! > On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek wrote: > > When using FreeIPA LDAP as identity source, you could ideally use > > Kerberos/GSSAPI a

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Jakub Hrozek
On Thu, Sep 12, 2013 at 03:54:59PM +0300, Thomas Raehalme wrote: > Hi! > > On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek wrote: > > > When using FreeIPA LDAP as identity source, you could ideally use > > Kerberos/GSSAPI authentication. But if that is not available, you can use > > simple LDAP bi

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Thomas Raehalme
Hi! On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek wrote: > When using FreeIPA LDAP as identity source, you could ideally use > Kerberos/GSSAPI authentication. But if that is not available, you can use > simple LDAP binds too. You cannot read the hash codes unless you are > "cn=Directory Manager"

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Jakub Hrozek
On Thu, Sep 12, 2013 at 02:28:45PM +0200, Martin Kosek wrote: > # ldapadd -h `hostname` -D "cn=Directory Manager" -x -w kokos123 ^^ 0wn3d :-)

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Martin Kosek
On 09/12/2013 03:18 PM, Thomas Raehalme wrote: > Hi! > > On Thu, Sep 12, 2013 at 4:06 PM, Martin Kosek wrote: >> I was just referring to fact, that when a system or application uses LDAP as >> an >> identity and authentication source, it often use simple LDAP Bind operation >> (i.e. accessing LD

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Martin Kosek
On 09/12/2013 02:54 PM, Thomas Raehalme wrote: > Hi! > > On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek wrote: > >> When using FreeIPA LDAP as identity source, you could ideally use >> Kerberos/GSSAPI authentication. But if that is not available, you can use >> simple LDAP binds too. You cannot r

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Martin Kosek
On 09/12/2013 01:46 PM, Thomas Raehalme wrote: > Hi, > > Previously we have used Atlassian Crowd as a source for user data in > various applications, both in-house built and proprietary such as JIRA > or Confluence. As we have deployed FreeIPA, I would like to start > using it as the identity sour