Re: [Freeipa-users] passwd sync

2012-03-29 Thread Rob Crittenden
Steven Jones wrote: 8><-- It cannot be a wildcard: if (strcasecmp(krbcfg->passsync_mgrs[i], bindDN) == 0) { pwdata.changetype = IPA_CHANGETYPE_DSMGR; break; } but it is multivalued. 8><-- This is over my head 8><-

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Simo Sorce
On Wed, 2012-03-28 at 20:12 +, Steven Jones wrote: > Hi, > > That is cool, but I have not read that anywhere, can we get that bit written > into the passsync section? or have I missed it? This may shed some light: http://freeipa.org/page/PasswordSynchronization Simo. -- Simo Sorce * Red

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Steven Jones
: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Thursday, 29 March 2012 8:53 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/28/2012 03:50 PM, Steven Jones wrote: > 8><-- > > It canno

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Dmitri Pal
On 03/28/2012 03:50 PM, Steven Jones wrote: > 8><-- > > It cannot be a wildcard: > if (strcasecmp(krbcfg->passsync_mgrs[i], bindDN) == 0) { > pwdata.changetype = IPA_CHANGETYPE_DSMGR; > break; > } > but it is multivalued. > > 8><--

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Steven Jones
8><-- It cannot be a wildcard: if (strcasecmp(krbcfg->passsync_mgrs[i], bindDN) == 0) { pwdata.changetype = IPA_CHANGETYPE_DSMGR; break; } but it is multivalued. 8><-- This is over my head 8><-- What exactly are yo

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Simo Sorce
On Tue, 2012-03-27 at 19:40 -0600, Rich Megginson wrote: > On 03/27/2012 07:36 PM, Steven Jones wrote: > > Hi > > > > Until we collapse the domains into one we will have a one way sync for > > staff only... I assume because a student does not exist if staff then > > there will be no syncthey

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rich Megginson
users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Rich Megginson [rmegg...@redhat.com] Sent: Wednesday, 28 March 2012 1:54 p.m. To: d...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/27/2012 05:01 PM, Dmitri Pal wrote: On 03/27/2012 06:24

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
p.m. To: d...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/27/2012 05:01 PM, Dmitri Pal wrote: > On 03/27/2012 06:24 PM, Steven Jones wrote: >> Hi, >> >> We want to do a one way password sync from AD to IPA for staff but not >>

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rich Megginson
on, NZ 0064 4 463 6272 From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 28 March 2012 11:16 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I c

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Dmitri Pal
_ > From: Rob Crittenden [rcrit...@redhat.com] > Sent: Wednesday, 28 March 2012 11:16 a.m. > To: Steven Jones > Cc: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] passwd sync > > Steven Jones wrote: >> Section 7.4.2 on password sync calls for a downlo

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
...@redhat.com] Sent: Wednesday, 28 March 2012 11:16 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync Steven Jones wrote: > Section 7.4.2 on password sync calls for a download of a > PassSync.msi...I cannot locate thisso your doc needs updating I

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
eeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Wednesday, 28 March 2012 11:07 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/27/2012 05:44 PM, Steven Jones wrote: Section 7.4.2 on password sync

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rob Crittenden
Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your doc needs updating I think. For the 7.4.2 number 4 point 2 I see uid=passync cn=systemaccounts cn=etc, then the dc= usual bits I assume the two cn='s are "standard"? It

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Dmitri Pal
On 03/27/2012 05:44 PM, Steven Jones wrote: > Section 7.4.2 on password sync calls for a download of a > PassSync.msi...I cannot locate thisso your doc needs updating I think. > > For the 7.4.2 number 4 point 2 I see uid=passync cn=systemaccounts > cn=etc, then the dc= usual bits > > I assume t

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rich Megginson
On 03/27/2012 03:44 PM, Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your doc needs updating I think. There is a version here http://port389.org/wiki/Download -Windows Password Synchronization For the 7.4.2 number 4 poi

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
Or maybe its on the AD so its, ou=People,dc=vuw,dc=ac,dc=nz ? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of