Re: [Freeipa-users] passwd sync

2012-03-29 Thread Rob Crittenden
Steven Jones wrote: 8-- It cannot be a wildcard: if (strcasecmp(krbcfg-passsync_mgrs[i], bindDN) == 0) { pwdata.changetype = IPA_CHANGETYPE_DSMGR; break; } but it is multivalued. 8-- This is over my head 8--

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Steven Jones
8-- It cannot be a wildcard: if (strcasecmp(krbcfg-passsync_mgrs[i], bindDN) == 0) { pwdata.changetype = IPA_CHANGETYPE_DSMGR; break; } but it is multivalued. 8-- This is over my head 8-- What exactly are you

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Dmitri Pal
On 03/28/2012 03:50 PM, Steven Jones wrote: 8-- It cannot be a wildcard: if (strcasecmp(krbcfg-passsync_mgrs[i], bindDN) == 0) { pwdata.changetype = IPA_CHANGETYPE_DSMGR; break; } but it is multivalued. 8-- This is

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Steven Jones
: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Thursday, 29 March 2012 8:53 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/28/2012 03:50 PM, Steven Jones wrote: 8-- It cannot be a wildcard

Re: [Freeipa-users] passwd sync

2012-03-28 Thread Simo Sorce
On Wed, 2012-03-28 at 20:12 +, Steven Jones wrote: Hi, That is cool, but I have not read that anywhere, can we get that bit written into the passsync section? or have I missed it? This may shed some light: http://freeipa.org/page/PasswordSynchronization Simo. -- Simo Sorce * Red

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
Or maybe its on the AD so its, ou=People,dc=vuw,dc=ac,dc=nz ? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rich Megginson
On 03/27/2012 03:44 PM, Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your doc needs updating I think. There is a version here http://port389.org/wiki/Download -Windows Password Synchronization For the 7.4.2 number 4

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Dmitri Pal
On 03/27/2012 05:44 PM, Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your doc needs updating I think. For the 7.4.2 number 4 point 2 I see uid=passync cn=systemaccounts cn=etc, then the dc= usual bits I assume the two

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rob Crittenden
Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your doc needs updating I think. For the 7.4.2 number 4 point 2 I see uid=passync cn=systemaccounts cn=etc, then the dc= usual bits I assume the two cn='s are standard? It

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Wednesday, 28 March 2012 11:07 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/27/2012 05:44 PM, Steven Jones wrote: Section 7.4.2 on password sync calls

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
...@redhat.com] Sent: Wednesday, 28 March 2012 11:16 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your doc needs updating I think

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Dmitri Pal
-users@redhat.com Subject: Re: [Freeipa-users] passwd sync Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your doc needs updating I think. For the 7.4.2 number 4 point 2 I see uid=passync cn=systemaccounts cn=etc

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rich Megginson
From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 28 March 2012 11:16 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync Steven Jones wrote: Section 7.4.2 on password sync calls for a download of a PassSync.msi...I cannot locate thisso your

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Steven Jones
...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/27/2012 05:01 PM, Dmitri Pal wrote: On 03/27/2012 06:24 PM, Steven Jones wrote: Hi, We want to do a one way password sync from AD to IPA for staff but not students as they are a different AD domain, can we

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Rich Megginson
...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Rich Megginson [rmegg...@redhat.com] Sent: Wednesday, 28 March 2012 1:54 p.m. To: d...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] passwd sync On 03/27/2012 05:01 PM, Dmitri Pal wrote: On 03/27/2012 06:24 PM, Steven

Re: [Freeipa-users] passwd sync

2012-03-27 Thread Simo Sorce
On Tue, 2012-03-27 at 19:40 -0600, Rich Megginson wrote: On 03/27/2012 07:36 PM, Steven Jones wrote: Hi Until we collapse the domains into one we will have a one way sync for staff only... I assume because a student does not exist if staff then there will be no syncthey will