Re: [Freeipa-users] FreeIPA – AD Trust Integration Option

2016-06-16 Thread Rob Crittenden
Saqib N Ali wrote: Rob, is there a architecture document/diagram that describes how 389-ds in the FreeIPA w/ AD Trust setup? You'll find a number of pages on freeipa.org. rob On Thu, Jun 16, 2016 at 9:08 AM, Rob Crittenden mailto:rcrit...@redhat.com>> wrote: Saqib N Ali wrote:

Re: [Freeipa-users] FreeIPA – AD Trust Integration Option

2016-06-16 Thread Saqib N Ali
Rob, is there a architecture document/diagram that describes how 389-ds in the FreeIPA w/ AD Trust setup? On Thu, Jun 16, 2016 at 9:08 AM, Rob Crittenden wrote: > Saqib N Ali wrote: > >> Hi Alexander, >> >> I understand that with Trust to AD, we can use AD for System of Records >> for the User A

Re: [Freeipa-users] FreeIPA – AD Trust Integration Option

2016-06-16 Thread Rob Crittenden
Saqib N Ali wrote: Hi Alexander, I understand that with Trust to AD, we can use AD for System of Records for the User Accounts. We do want IPA to maintain the policies, but just want to use SunLDAP instead of 389 Directory Server for storing the policies. From Enterprise Architecture point of v

Re: [Freeipa-users] FreeIPA – AD Trust Integration Option

2016-06-16 Thread Saqib N Ali
Hi Alexander, I understand that with Trust to AD, we can use AD for System of Records for the User Accounts. We do want IPA to maintain the policies, but just want to use SunLDAP instead of 389 Directory Server for storing the policies. From Enterprise Architecture point of view, 389 Directory Se

Re: [Freeipa-users] FreeIPA – AD Trust Integration Option

2016-06-15 Thread Alexander Bokovoy
On Wed, 15 Jun 2016, Saqib N Ali wrote: Greetings, If we want to use the FreeIPA Active Directory Trust Integration Option, can we use an existing implementation of SunLDAP to store the Policies (e.g. sudo, hbac etc.) Essentially we don't to create another LDAP Directory just for storing the Po