Re: [Freeipa-users] Winsync agreement password sync failing for specific user on the IPA side

2016-04-12 Thread Andreas Calminder
Sorry for the noise, I did some backtracking in the mailing list archives and found a conversation from December 2015 regarding the same issue with a nice bugzilla attached https://bugzilla.redhat.com/show_bug.cgi?id=1287092, I'll try to work around the issue with group nesting. /andreas On

[Freeipa-users] Winsync agreement password sync failing for specific user on the IPA side

2016-04-12 Thread Andreas Calminder
Hello, I've got a pretty strange problem with FreeIPA 4.2.0-15.el7 running on a rhel 7.2 and wondering if anyone can shed some light on it. I've setup a winsync agreement and it seems to be working fine, stuff gets synced from the AD to IPA. I've also got the PassSync application installed on

Re: [Freeipa-users] winsync agreement for multiple subtrees

2014-03-14 Thread Rich Megginson
27;ll just have to try it. From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Todd Maugh [tma...@boingo.com] Sent: Friday, March 14, 2014 10:13 AM To: freeipa-users@redhat.com Subject: [Freeipa-users] winsync agreement for multiple subtrees goo

Re: [Freeipa-users] winsync agreement for multiple subtrees

2014-03-14 Thread Todd Maugh
__ > From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of Todd Maugh [tma...@boingo.com] > Sent: Friday, March 14, 2014 10:13 AM > To: freeipa-users@redhat.com > Subject: [Freeipa-users] winsync agreement for multiple subtrees > &

Re: [Freeipa-users] winsync agreement for multiple subtrees

2014-03-14 Thread Rich Megginson
-users-boun...@redhat.com] on behalf of Todd Maugh [tma...@boingo.com] Sent: Friday, March 14, 2014 10:13 AM To: freeipa-users@redhat.com Subject: [Freeipa-users] winsync agreement for multiple subtrees good morning, every day it's something new. so turns out my AD admin has built ad with

Re: [Freeipa-users] winsync agreement for multiple subtrees

2014-03-14 Thread Todd Maugh
...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Todd Maugh [tma...@boingo.com] Sent: Friday, March 14, 2014 10:13 AM To: freeipa-users@redhat.com Subject: [Freeipa-users] winsync agreement for multiple subtrees good morning, every day it's something new. so turns out my AD admin has

[Freeipa-users] winsync agreement for multiple subtrees

2014-03-14 Thread Todd Maugh
good morning, every day it's something new. so turns out my AD admin has built ad with user accounts spread out over multiple subtrees' and I need to handle them all. is there a way to sync everything under dc=bwinc,dc=local. instead of doing cn=users,dc=bwinc,dc=local does this make sense? t

Re: [Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups

2012-10-01 Thread Rich Megginson
On 09/27/2012 05:50 PM, Steven Jones wrote: 8>< This and not bringing over all users because the user can have a sub-folder for mobile phone sync so gets wiped by the previous bug we discussed are total show stoppers for our IPA and RHEL desktop deployment, This is a new one, perhaps

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-27 Thread Steven Jones
Rich Megginson [rmegg...@redhat.com] Sent: Friday, 28 September 2012 8:41 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/27/2012 02:38 PM, Steven Jones wrote: > Its also a forest wide setting Just to confirm - setting Max

Re: [Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups

2012-09-27 Thread Steven Jones
8>< > This and not bringing over all users because the user can have a sub-folder > for mobile phone sync so gets wiped by the previous bug we discussed are > total show stoppers for our IPA and RHEL desktop deployment, This is a new one, perhaps I missed it. If an AD user has a sub-fol

Re: [Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups

2012-09-27 Thread Rich Megginson
: [Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups On 09/26/2012 03:17 PM, Steven Jones wrote: Is this expected? Ticket #2324 AD Users synced to IPA server are not added to "ipausers" group https://fedorahoste

Re: [Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups

2012-09-27 Thread Steven Jones
_ From: Rich Megginson [rmegg...@redhat.com] Sent: Friday, 28 September 2012 4:08 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups On 09/26/2012 03:17 PM, St

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-27 Thread Rich Megginson
September 2012 3:57 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, Unable to get this to work on win2k3r2 even with enterprise admin permissions. What I have found is this which Im about to try, 1. Use adsiedit.msc to bind to any domain

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-27 Thread Steven Jones
[steven.jo...@vuw.ac.nz] Sent: Thursday, 27 September 2012 3:57 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, Unable to get this to work on win2k3r2 even with enterprise admin permissions. What I have found is this which Im about to try, 1. Use

Re: [Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups

2012-09-27 Thread Rich Megginson
On 09/26/2012 03:17 PM, Steven Jones wrote: Is this expected? Ticket #2324 AD Users synced to IPA server are not added to "ipausers" group https://fedorahosted.org/freeipa/ticket/2324 By "existing users" do you mean existing users in IPA? Are these users synced with entries in AD? regards

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-27 Thread Rich Megginson
26 September 2012 1:31 p.m. To: Rich Megginson Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Rich Megginson wrote: On 09/25/2012 03:34 PM, Steven Jones wrote: Hi, I have set the filter size as 2 for the user and it makes no difference

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-26 Thread Steven Jones
[natxo.ase...@gmail.com] Sent: Thursday, 27 September 2012 2:04 a.m. To: Rob Crittenden Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On Wed, Sep 26, 2012 at 5:46 AM, Rob Crittenden wrote: > > Steven Jones wrote: >> >>

[Freeipa-users] winsync agreement transferred users not going into ipausers and existing users dropped from all their groups

2012-09-26 Thread Steven Jones
Is this expected? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-26 Thread Natxo Asenjo
On Wed, Sep 26, 2012 at 5:46 AM, Rob Crittenden wrote: > > Steven Jones wrote: >> >> Hi, >> >> I dont have a ldapmodify command for changing something in AD. >> >> I have increased the only scope I/we know about which is the return of >> objects from a search inside the AD gui but that might be s

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rob Crittenden
llington, NZ 0064 4 463 6272 From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 26 September 2012 1:31 p.m. To: Rich Megginson Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Rich Meggin

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Steven Jones
eipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Rich Megginson wrote: > On 09/25/2012 03:34 PM, Steven Jones wrote: >> Hi, >> >> I have set the filter size as 2 for the user and it makes no >> difference. > Where did you set this? In

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rob Crittenden
Rich Megginson wrote: On 09/25/2012 03:34 PM, Steven Jones wrote: Hi, I have set the filter size as 2 for the user and it makes no difference. Where did you set this? In IPA? In AD? If so, where? How? What does "filter size" mean? To me, it means "the size of an LDAP search filter in a

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rich Megginson
. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/24/2012 11:49 PM, Steven Jones wrote: Hi, Im confused here, has no one tried to winsync 2000+ users before? Are there any docs on working around this limit? Ive up'd the user to 2 but that s

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Steven Jones
0064 4 463 6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Wednesday, 26 September 2012 7:39 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Dmitri Pal
> > From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of Steven Jones [steven.jo...@vuw.ac.nz] > Sent: Tuesday, 25 September 2012 3:17 p.m. > Cc: freeipa-users@redhat.com > Subject: Re: [Freeipa-use

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rich Megginson
t.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] Sent: Tuesday, 25 September 2012 3:17 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, I am trying to run this and getting search exceeded. ldapsearch -xLLL -

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-24 Thread Steven Jones
eeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, I am trying to run this and getting search exceeded. ldapsearch -xLLL -D -w -h -s sub -b OU=VUW_Staff,DC=staff,DC=vuw,DC=ac,DC=nz "cn=*" dn > ad.dns.txt Looks like I have 5900 AD users

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-24 Thread Steven Jones
Saturday, 22 September 2012 3:46 a.m. To: d...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/21/2012 09:18 AM, Dmitri Pal wrote: > On 09/21/2012 11:07 AM, Rich Megginson wrote: >> On 09/21/2012 09:04 AM, Dmitri Pal wrote: >

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-23 Thread Steven Jones
-users-boun...@redhat.com] on behalf of Rich Megginson [rmegg...@redhat.com] Sent: Saturday, 22 September 2012 3:46 a.m. To: d...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/21/2012 09:18 AM, Dmitri Pal wrote: > On 09/21/2012 11

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Rich Megginson
rmegg...@redhat.com] *Sent:* Friday, 21 September 2012 11:38 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote: Hi, I have imported users, but there are 5700 of them but I only have 2000

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Dmitri Pal
t; It seems IPA has some sort of limit of searching it will only show >>>>> the first 2k >>>>> of user entries? >>>>> >>>>> regards >>>>> >>>>> Steven Jones >>>>> >>>>> Technical Specialist - Linux RHCE >&g

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Rich Megginson
6272 --- *From:* Rich Megginson [rmegg...@redhat.com] *Sent:* Friday, 21 September 2012 11:38 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote: Hi, I have imp

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Dmitri Pal
gt; >>> regards >>> >>> Steven Jones >>> >>> Technical Specialist - Linux RHCE >>> >>> Victoria University, Wellington, NZ >>> >>> 0064 4 463 6272 >>> >>> --------------- >>> >>> *From:* Rich Megginson [rmegg...@re

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Rich Megginson
6272 --- *From:* Rich Megginson [rmegg...@redhat.com] *Sent:* Friday, 21 September 2012 11:38 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Martin Kosek
012 11:38 a.m. > *To:* Steven Jones > *Cc:* freeipa-users@redhat.com > *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users > > On 09/20/2012 03:52 PM, Steven Jones wrote: >> Hi, >> >> I have imported users, but there are 5700 of them but I only have 2000 w

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
: Friday, 21 September 2012 11:38 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote: Hi, I have imported users, but there are 5700 of them but I only have 2000 which corresponds to the view

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Rich Megginson
*From:* freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] *Sent:* Friday, 21 September 2012 8:44 a.m. *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users I have hundreds of disable

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Friday, 21 September 2012 8:53 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 02:43 PM

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Friday, 21 September 2012 8:56 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
Subject: Re: [Freeipa-users] winsync agreement wipes IPA users I have hundreds of disable users in IPA now transferred from AD, is there a quick/clean way to purge them from IPA? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
[freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Friday, 21 September 2012 8:53 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 04:44 PM, Steven Jones wrote: I have hundreds of disable users in IPA now

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
Pal [d...@redhat.com] Sent: Friday, 21 September 2012 8:56 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 04:54 PM, Dmitri Pal wrote: On 09/20/2012 04:43 PM, Steven Jones wrote: Some comments on the win sync agreement syntax. Hi, I&#

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Dmitri Pal
------ >> *From:* freeipa-users-boun...@redhat.com >> [freeipa-users-boun...@redhat.com] on behalf of Steven Jones >> [steven.jo...@vuw.ac.nz] >> *Sent:* Thursday, 20 September 2012 2:48 p.m. >> *Cc:* freeipa-use

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Dmitri Pal
ven Jones > > Technical Specialist - Linux RHCE > > Victoria University, Wellington, NZ > > 0064 4 463 6272 > > > *From:* freeipa-users-boun...@redhat.com > [freeipa-users-boun...@redhat.com] on behalf of Steven Jones > [steven.jo...@vuw.ac.nz] > *S

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Rich Megginson
--- *From:* freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] *Sent:* Thursday, 20 September 2012 2:48 p.m. *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users it isn

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Dmitri Pal
On 09/20/2012 04:44 PM, Steven Jones wrote: > I have hundreds of disable users in IPA now transferred from AD, is > there a quick/clean way to purge them from IPA? using ldapsearch to test the list and then ldapmodify to remove. > > regards > > Steven Jones > > Technical Specialist - Linux RHCE >

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
eptember 2012 2:48 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users it isnt, Im doing a OU=VUW_Staff instead of cn=VUW_Staff and its mostly working except Im also getting some "rubbish" so its looking like the import script/query to AD i

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
I have hundreds of disable users in IPA now transferred from AD, is there a quick/clean way to purge them from IPA? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ___ Freeipa-users mailin

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Steven Jones
4 463 6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] Sent: Thursday, 20 September 2012 12:15 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Steven Jones
: Thursday, 20 September 2012 11:03 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/19/2012 04:55 PM, Steven Jones wrote: Hi, Sample of errors log, = [17/Sep/2012:13:31:48 +1200] NSMMReplicationPlugin - changelog

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Steven Jones
4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Thursday, 20 September 2012 11:03 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/19/2012 04:55 PM, Steven Jones wrote: Hi, Sample

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Rich Megginson
m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 07:10 PM, Steven Jones wrote: Hi, I understand that I'll lose users that are cn=Staff_Admins,dc=etc So the Q is why I am losing users in the --win-subtree cn=VUW_S

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Steven Jones
64 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Wednesday, 19 September 2012 12:32 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 07:10 PM, Steven Jones wrote: Hi, I unde

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-18 Thread Rob Crittenden
Rich Megginson wrote: On 09/17/2012 07:10 PM, Steven Jones wrote: Hi, I understand that I'll lose users that are cn=Staff_Admins,dc=etc So the Q is why I am losing users in the --win-subtree cn=VUW_Staff,dc= etc This I dont understand I have the -v already, anyway to make it very ve

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-18 Thread Rich Megginson
*Sent:* Tuesday, 18 September 2012 11:37 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Steven Jones
RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Tuesday, 18 September 2012 12:47 p.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 06:

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Rich Megginson
7 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc=nz as my

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Steven Jones
2012 11:37 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc=nz as

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Rich Megginson
On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc=nz as my users are not in the users folder but the VUW_Staff folder (at the same level) and it wiped all IPA users that are also

[Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Steven Jones
Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc=nz as my users are not in the users folder but the VUW_Staff folder (at the same level) and it wiped all IPA users that are also in AD. While doing the actual update does t

Re: [Freeipa-users] winsync agreement

2012-09-14 Thread Rich Megginson
On 09/14/2012 09:20 AM, Dmitri Pal wrote: On 09/13/2012 08:10 PM, Steven Jones wrote: = Are there corresponding users in IPA where the IPA uid is the same as the AD samaccountname of a user in the admin subtree? = I think the answer to that is yes. "admin-steven" in IPA also exists in

Re: [Freeipa-users] winsync agreement

2012-09-14 Thread Dmitri Pal
On 09/13/2012 08:10 PM, Steven Jones wrote: > = > Are there corresponding users in IPA where the IPA uid is the same as > the AD samaccountname of a user in the admin subtree? > = > > I think the answer to that is yes. > > "admin-steven" in IPA also exists in AD as "admin-steven". So if

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rich Megginson
On 09/13/2012 06:10 PM, Steven Jones wrote: = Are there corresponding users in IPA where the IPA uid is the same as the AD samaccountname of a user in the admin subtree? = I think the answer to that is yes. "admin-steven" in IPA also exists in AD as "admin-steven". So if I had set t

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Steven Jones
= Are there corresponding users in IPA where the IPA uid is the same as the AD samaccountname of a user in the admin subtree? = I think the answer to that is yes. "admin-steven" in IPA also exists in AD as "admin-steven". So if I had set the two to different names the one in IPA woul

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rich Megginson
RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Friday, 14 September 2012 11:15 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement On 09/13/2012 05:

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Steven Jones
versity, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Friday, 14 September 2012 11:15 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement On 09/13/2012 05:11 PM, Steven Jones wrote: >

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rich Megginson
On 09/13/2012 05:11 PM, Steven Jones wrote: Hi, So I have 6.3 and just lost all my IPA users. In production or in a test environment? So anyone on 6.2/6.3 until they upgrade after December's 6.4 could lose all their IPA users if they do a winsync agreement and dont twig to that option being

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Steven Jones
Hi, So I have 6.3 and just lost all my IPA users. So anyone on 6.2/6.3 until they upgrade after December's 6.4 could lose all their IPA users if they do a winsync agreement and dont twig to that option being essential if they dont have a std AD. Not only that my admins are in a separate OU, s

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rich Megginson
463 6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] Sent: Friday, 14 September 2012 8:53 a.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement Hi

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rich Megginson
Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Friday, 14 September 2012 2:56 a.m. To: Rob Crittenden Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-user

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rich Megginson
ialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rob Crittenden [rcrit...@redhat.com] Sent: Friday, 14 September 2012 12:30 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement Ste

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Steven Jones
From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] Sent: Friday, 14 September 2012 8:53 a.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement Hi, Do you not think that maybe the winsync feature

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Steven Jones
Megginson [rmegg...@redhat.com] Sent: Friday, 14 September 2012 2:56 a.m. To: Rob Crittenden Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement On 09/13/2012 06:30 AM, Rob Crittenden wrote: > Steven Jones wrote: >> I just setup a winsync agreement e

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Steven Jones
Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: Rob Crittenden [rcrit...@redhat.com] Sent: Friday, 14 September 2012 12:30 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rich Megginson
On 09/13/2012 06:30 AM, Rob Crittenden wrote: Steven Jones wrote: I just setup a winsync agreement expect its wiped any IPA user that also exists in AD. Is this expected? if so how do I stop it doing that? The 389-ds winsync plugin is deleting entries that appear to be out of scope, https:/

Re: [Freeipa-users] winsync agreement

2012-09-13 Thread Rob Crittenden
Steven Jones wrote: I just setup a winsync agreement expect its wiped any IPA user that also exists in AD. Is this expected? if so how do I stop it doing that? The 389-ds winsync plugin is deleting entries that appear to be out of scope, https://fedorahosted.org/freeipa/ticket/2927 rob ___

[Freeipa-users] winsync agreement

2012-09-12 Thread Steven Jones
I just setup a winsync agreement expect its wiped any IPA user that also exists in AD. Is this expected? if so how do I stop it doing that? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272