Please note that the FreeIPA Fedora 19 Test Day is happening tomorrow! Thanks in advance to all volunteers helping us test the new Active Directory Trust features.
The FreeIPA Team On 07/19/2013 11:56 PM, Dmitri Pal wrote: > Hello, > > The FreeIPA team is happy to welcome you to a Fedora Test Day that is > being held on Thursday, July 25th. > > We would like to invite you to take part in testing of the upcoming FreeIPA > 3.3 > release containing 2 major improvements for easier deployment of FreeIPA > Active > Directory Trust feature to existing environments: > > 1) Use POSIX attributes defined in Active Directory [1] > > With previous FreeIPA releases, users coming from Active Directory to FreeIPA > managed machines were always assigned POSIX attributes (UID and GID) by > algorithmic mapping. > > However, in some deployments, Active Directory users and groups already have > defined custom POSIX attribute values (UID and GID), which may then be > leveraged on Linux machines via other 3rd party Active Directory integration > solutions. Administrator may choose to keep the values to not disrupt file > ownerships. > > With FreeIPA 3.3, FreeIPA Active Directory Trust may be configured to use > these > attributes when Active Directory user authenticates to Linux machines. > > > 2) Expose POSIX data on legacy systems without recent SSSD > > Administrators may have a deployment of machines which cannot use the recent > SSSD with Active Directory Trust support but would still like to be able to > authenticate with Active Directory user to these machines. This may affect for > example older Linux machines, UNIX machines. > > With FreeIPA 3.3, Administrator may configure a compatibility LDAP tree which > will contain identities of the Active Directory users to the legacy systems. > These systems may then leverage standard LDAP authentication in this tree > allowing selected Active Directory users to authenticate. > > > To read more about the Test Day and suggested tests, see the following link: > > https://fedoraproject.org/wiki/Test_Day:2013-07-25_AD_trusts_with_POSIX_attributes_in_AD_and_support_for_old_clients > > Thank you for your help and participation! > > The FreeIPA team > > [1] http://www.freeipa.org/page/V3/Use_posix_attributes_defined_in_AD > [2] http://www.freeipa.org/page/V3/Serving_legacy_clients_for_trusts > > [IdM | IPA] FAQs: https://url.corp.redhat.com/idm-faq > Identity Management SME Team on Docspace > https://url.corp.redhat.com/sme-idm > Search the archives: post-office.corp.redhat.com/mailman/listinfo/idm-tech > > > _______________________________________________ > Freeipa-users mailing list > Freeipa-users@redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-users > _______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
