Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-28 Thread Alexander Bokovoy
On Sat, 27 Jun 2015, Dmitri Pal wrote: On 06/26/2015 11:26 PM, Alexander Bokovoy wrote: - Original Message - On 06/23/2015 03:02 PM, Alexander Bokovoy wrote: On Tue, 23 Jun 2015, Dmitri Pal wrote: On 06/17/2015 09:56 AM, Alexander Bokovoy wrote: On Wed, 17 Jun 2015, Henry Hofmann

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-27 Thread Dmitri Pal
On 06/26/2015 11:26 PM, Alexander Bokovoy wrote: - Original Message - On 06/23/2015 03:02 PM, Alexander Bokovoy wrote: On Tue, 23 Jun 2015, Dmitri Pal wrote: On 06/17/2015 09:56 AM, Alexander Bokovoy wrote: On Wed, 17 Jun 2015, Henry Hofmann wrote: Ok, how can I configure the map

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-26 Thread Dmitri Pal
On 06/23/2015 03:02 PM, Alexander Bokovoy wrote: On Tue, 23 Jun 2015, Dmitri Pal wrote: On 06/17/2015 09:56 AM, Alexander Bokovoy wrote: On Wed, 17 Jun 2015, Henry Hofmann wrote: Ok, how can I configure the map of source attributes (mail or any other) to compat tree? Go back in archives in

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-26 Thread Alexander Bokovoy
- Original Message - On 06/23/2015 03:02 PM, Alexander Bokovoy wrote: On Tue, 23 Jun 2015, Dmitri Pal wrote: On 06/17/2015 09:56 AM, Alexander Bokovoy wrote: On Wed, 17 Jun 2015, Henry Hofmann wrote: Ok, how can I configure the map of source attributes (mail or any other) to

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-23 Thread Alexander Bokovoy
On Tue, 23 Jun 2015, Dmitri Pal wrote: On 06/17/2015 09:56 AM, Alexander Bokovoy wrote: On Wed, 17 Jun 2015, Henry Hofmann wrote: Ok, how can I configure the map of source attributes (mail or any other) to compat tree? Go back in archives in this list and read discussions about Single mail

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-23 Thread Dmitri Pal
On 06/17/2015 09:56 AM, Alexander Bokovoy wrote: On Wed, 17 Jun 2015, Henry Hofmann wrote: Ok, how can I configure the map of source attributes (mail or any other) to compat tree? Go back in archives in this list and read discussions about Single mail deployment in an FreeIPA-WindowsAD

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-17 Thread Alexander Bokovoy
On Wed, 17 Jun 2015, Henry Hofmann wrote: For redmine use http://www.redmine.org/plugins/redmine_pam_auth. You don't need to include the user which runs redmine into shadow group with FreeIPA because user accounts are never in /etc/shadow for FreeIPA so you don't need that access. What you

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-17 Thread Henry Hofmann
[mailto:sb...@redhat.com] Sent: Mittwoch, 17. Juni 2015 10:36 To: Henry Hofmann Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Question for AD trust and Webservices On Wed, Jun 17, 2015 at 08:21:22AM +, Henry Hofmann wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-17 Thread Alexander Bokovoy
On Wed, 17 Jun 2015, Henry Hofmann wrote: Thanks, I get more and more information and amazed about FreeIPA and functionally. I can successfully login in Redmine and Cloud with users from the trust domain. I have add additional attributes for the user accounts like mail etc. For the external

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-17 Thread Henry Hofmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It should be possible, yes - if you target web service/Red Mine to the compat tree, as it was done for example in this integration: http://www.freeipa.org/page/HowTo/vsphere5_integration Tanks, your expression is very helpful for nested group

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-17 Thread Martin Kosek
On 06/15/2015 02:19 PM, Henry Hofmann wrote: Hi, I have a question about using IPA (v.4) with an AD (2012) Trust. Is it possible to login with a user from the Active Directory Domain to an Web-Service (like redmine) which is configured to the IPA LDAP? I have understand this by read this

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-17 Thread Henry Hofmann
To: Henry Hofmann Cc: Sumit Bose; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Question for AD trust and Webservices On Wed, 17 Jun 2015, Henry Hofmann wrote: Thanks, I get more and more information and amazed about FreeIPA and functionally. I can successfully login in Redmine and Cloud

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-17 Thread Alexander Bokovoy
On Wed, 17 Jun 2015, Henry Hofmann wrote: Ok, how can I configure the map of source attributes (mail or any other) to compat tree? Go back in archives in this list and read discussions about Single mail deployment in an FreeIPA-WindowsAD scenario. TLDR; not possible in the compat tree as of

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-16 Thread Alexander Bokovoy
On Tue, 16 Jun 2015, Henry Hofmann wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I understand this is for application which is using Kerberos. No, it is not only for that. I have some web applications like redmine and owncloud which have a own user management. They needs to be

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-16 Thread Petr Spacek
On 16.6.2015 09:34, Henry Hofmann wrote: Hi, I have a question about using IPA (v.4) with an AD (2012) Trust. Is it possible to login with a user from the Active Directory Domain to an Web-Service (like redmine) which is configured to the IPA LDAP? I have understand this by read this

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-16 Thread Henry Hofmann
used apache or tomcat as application server. Henry - -Original Message- From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Petr Spacek Sent: Dienstag, 16. Juni 2015 10:35 To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Question

Re: [Freeipa-users] Question for AD trust and Webservices

2015-06-16 Thread Petr Spacek
-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Petr Spacek Sent: Dienstag, 16. Juni 2015 10:35 To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Question for AD trust and Webservices On 16.6.2015 09:34, Henry Hofmann wrote: Hi, I have a question about