Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-02-01 Thread Michaël Van de Borne
Ok, thank you very much guys for your ideas. That's why I definitely love open source... :) Cheers, m. Le 01-02-17 à 09:04, Michael Ströder a écrit : Alexander Bokovoy wrote: On ti, 31 tammi 2017, Rich Megginson wrote: On 01/31/2017 04:46 PM, Michaël Van de Borne wrote: That was the feare

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-02-01 Thread Michael Ströder
Alexander Bokovoy wrote: > On ti, 31 tammi 2017, Rich Megginson wrote: >> On 01/31/2017 04:46 PM, Michaël Van de Borne wrote: >>> That was the feared, but somehow expected, answer. >>> >>> Any entry point/documentation about how to start such a script? >> >> Do FreeIPA and OpenLDAP still support th

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Alexander Bokovoy
On ti, 31 tammi 2017, Rich Megginson wrote: On 01/31/2017 04:46 PM, Michaël Van de Borne wrote: That was the feared, but somehow expected, answer. Any entry point/documentation about how to start such a script? Do FreeIPA and OpenLDAP still support the syncrepl protocol? a standard syncrepl

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Rich Megginson
On 01/31/2017 04:46 PM, Michaël Van de Borne wrote: That was the feared, but somehow expected, answer. Any entry point/documentation about how to start such a script? Do FreeIPA and OpenLDAP still support the syncrepl protocol? cheers, m. -- *Michaël Van de Borne* Free Bird Computing SPRL

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Michaël Van de Borne
This would be the best option! But customer won't allow this :( Since the openLDAP is also used by other apps. So I need to sync them. Which means: - adding the new users (not so difficult) - removing old user (perhaps not too complicated) - replicating changes like a password update (for this

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Michaël Van de Borne
That was the feared, but somehow expected, answer. Any entry point/documentation about how to start such a script? cheers, m. -- *Michaël Van de Borne* Free Bird Computing SPRL - Gérant 104 rue d'Azebois, 6230 Thiméon *Tel:* +32(0)472 695716 *Skype:* mikemowgli *TVA:* BE0637.834.386 Linkedin p

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Alexander Bokovoy
On ti, 31 tammi 2017, Michaël Van de Borne wrote: h, ok, thank you. But indeed, I would need HBAC and sudo rules in the future. So I believe the only exit here is to keep openLDAP and FreeIPA in sync. Any clue on how to do this efficiently? Well, we have 'ipa migrate-ds' functionality but t

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Martin Basti
Is there a possibility to migrate OpenLDAP to IPA DS and use only one source of Identity data? Martin^2 On 31.01.2017 16:30, Michaël Van de Borne wrote: h, ok, thank you. But indeed, I would need HBAC and sudo rules in the future. So I believe the only exit here is to keep openLDAP and

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Michaël Van de Borne
h, ok, thank you. But indeed, I would need HBAC and sudo rules in the future. So I believe the only exit here is to keep openLDAP and FreeIPA in sync. Any clue on how to do this efficiently? Thank you, Cheers, m. Le 31-01-17 à 16:23, Alexander Bokovoy a écrit : On ti, 31 tammi 2017, Mic

Re: [Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Alexander Bokovoy
On ti, 31 tammi 2017, Michaël Van de Borne wrote: Hello list, Here's my situation: I'm installing Hadoop for a customer, and the Hadoop cluster is secured with Kerberos. I used FreeIPA as a KDC. The customer uses openLDAP as a directory server. For now, our solution is to copy the whole openL

[Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Michaël Van de Borne
Hello list, Here's my situation: I'm installing Hadoop for a customer, and the Hadoop cluster is secured with Kerberos. I used FreeIPA as a KDC. The customer uses openLDAP as a directory server. For now, our solution is to copy the whole openLDAP user base to FreeIPA, and then use FreeIPA for

[Freeipa-users] Identification with openLDAP and authorization with FreeIPA

2017-01-31 Thread Michaël Van de Borne
Hello list, Here's my situation: I'm installing Hadoop for a customer, and the Hadoop cluster is secured with Kerberos. I used FreeIPA as a KDC. The customer uses openLDAP as a directory server. For now, our solution is to copy the whole openLDAP user base to FreeIPA, and then use FreeIPA for