[Freeipa-users] Winsync question

2013-11-11 Thread gflwqs gflwqs
Hi, I have configured my IPA server to do a UNI sync fromWindows. When i change some attribute on a synced user in IPA, for example the initials attribute, my understanding from the manuals is that when the next sync operation occurs my changes should be owerwritten? however it does not? can anyone

[Freeipa-users] passync questions?

2013-11-11 Thread gflwqs gflwqs
Hi, I have setup the winsync and passsync service according to the docs, but having problems with passsync. Scenario: When i change password in IPA which does not meet the password policy defined in AD the password does not get synced over to AD, however it get set on the IPA side? Question: Shou

[Freeipa-users] Active Directory Sync user rights?

2013-11-12 Thread gflwqs gflwqs
Hi, I have created the sync user with: - *Replicating directory changes* rights to the synchronized Active Directory subtree. - A member of the *Account Operator* and *Enterprise Read-Only Domain controller* groups. The user attribute syncronization is working fine, however the passync from IPA t