Re: [Freeipa-users] 2 question on passsync

2013-11-12 Thread Simo Sorce
On Wed, 2013-11-13 at 00:14 +, Steven Jones wrote: > Hi > > >From the RH manual, > > "15.6.3. Exempting Active Directory Users from Password Synchronization" This paragraph is completely misguiding, sorry, we'll open a doc bug to correct the explanation. The list of uses set in passSyncMana

Re: [Freeipa-users] 2 question on passsync

2013-11-12 Thread Steven Jones
Hi >From the RH manual, "15.6.3. Exempting Active Directory Users from Password Synchronization" So the heading says I can? or I cannot? by running, "ldapmodify -x -D "cn=Directory Manager" -w secret -h ldap.example.com -p 389 dn: cn=ipa_pwd_extop,cn=plugins,cn=config changetype: modify add

Re: [Freeipa-users] 2 question on passsync

2013-11-12 Thread Steven Jones
. To: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] 2 question on passsync Steven Jones wrote: > Hi, > > "Winsync does not sync password hashes. Passsync syncs passwords and then > causes the creation of the hashes." > > yep, thats whatt I expecte

Re: [Freeipa-users] 2 question on passsync

2013-11-12 Thread Rob Crittenden
Steven Jones wrote: Hi, "Winsync does not sync password hashes. Passsync syncs passwords and then causes the creation of the hashes." yep, thats whatt I expected, I just didnt word it well. I just wondered if we could receive the plain text password then hash it, then for an excluded user com

Re: [Freeipa-users] 2 question on passsync

2013-11-12 Thread Dmitri Pal
ilding, > > Wellington, NZ > > 6012 > > 0064 4 463 6272 > > > From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of Dmitri Pal [d...@redhat.com] > Sent: Wednesday, 13 November 2013 10:29

Re: [Freeipa-users] 2 question on passsync

2013-11-12 Thread Steven Jones
lding, Wellington, NZ 6012 0064 4 463 6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Wednesday, 13 November 2013 10:29 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] 2 question on passsyn

Re: [Freeipa-users] 2 question on passsync

2013-11-12 Thread Dmitri Pal
On 11/12/2013 03:47 PM, Steven Jones wrote: > Hi, > > Not sure on the details here so please bear with me When passsync is setup > some users can be exempted from the sync. > > So I have 2 questions or requests for features maybe. > > This feature is good, however there is nothing within the IPA s

[Freeipa-users] 2 question on passsync

2013-11-12 Thread Steven Jones
Hi, Not sure on the details here so please bear with me When passsync is setup some users can be exempted from the sync. So I have 2 questions or requests for features maybe. This feature is good, however there is nothing within the IPA system that I can see that prevents a user manually setti