Re: [Freeipa-users] winsync msi

2012-07-25 Thread Rich Megginson
On 07/24/2012 03:15 PM, Steven Jones wrote: Hi Rich, I can appreciate what you are saying, but Not on Windows but specifically AD, the very core of our 21,000+ user base, that makes such an add on significant and gets focus. What we have seen with another similar (yes, commercial) MSI

Re: [Freeipa-users] winsync msi

2012-07-25 Thread Steven Jones
Hi, Ah ok, I have the official one. One thing on the free site, it says the password is transmitted as clear text, no mention of over an encrypted secure channelthe security guys had a fit.so if you update that web page it would help the cause. regards Steven Jones Technical

Re: [Freeipa-users] User can't login via ssh from external

2012-07-25 Thread Joe Linoff
As Rob says, I think we should take a look at SSSD and system logs. Can you paste or attach the couple of lines that are appended to /var/log/secure during the login attempt? That should give us a clue on whether the SSSD PAM modules are contacted. Can you also add debug_level = 8 to

Re: [Freeipa-users] winsync msi

2012-07-25 Thread Rich Megginson
On 07/25/2012 02:41 PM, Steven Jones wrote: Hi, Ah ok, I have the official one. From where did you get it? And does it allay your concerns? One thing on the free site, it says the password is transmitted as clear text, no mention of over an encrypted secure channelthe security guys

Re: [Freeipa-users] winsync msi

2012-07-25 Thread Steven Jones
Hi, From a RH support case as I dont have access to the RDS channel. No, its doesn't allay my Windows and security ppls concerns http://port389.org/wiki/Download This is an Active Directory plug-in that intercepts password changes made to AD and sends the clear text password to 389 DS to

Re: [Freeipa-users] winsync msi

2012-07-25 Thread Rich Megginson
On 07/25/2012 06:11 PM, Steven Jones wrote: Hi, From a RH support case as I dont have access to the RDS channel. We just updated the RHEL 6.3 downloads to have the RedHat-PassSync .msi files. No, its doesn't allay my Windows and security ppls concerns I was speaking specifically

Re: [Freeipa-users] winsync msi

2012-07-25 Thread Steven Jones
Hi, I will ask regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Thursday, 26 July 2012 12:28 p.m. To: Steven Jones Cc:

Re: [Freeipa-users] User can't login via ssh from external

2012-07-25 Thread Steven Jones
I am now getting this regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Joe Linoff [jlin...@tabula.com] Sent: Tuesday, 24 July 2012 10:04 a.m. To: Steven Jones Cc: freeipa-users@redhat.com;