Re: [Freeipa-users] synchronizing with AD

2011-12-08 Thread Rich Megginson
On 12/08/2011 02:31 PM, Jimmy wrote: I had a few weeks away from this configuration and finally getting back to it. I'm uncertain of the correct path forward. I don't seem to be able to find the documentation on how to install the cert into the Passsync NSS database. I have been following this

Re: [Freeipa-users] synchronizing with AD

2011-12-08 Thread Sigbjorn Lie
Hi Jimmy, I believe this is the documentation for the old IPA 1 version. You'll find the updated guide at the link below. I used this guide for configuring IPA <-> AD sync. http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/index.html Regards, Siggi

Re: [Freeipa-users] synchronizing with AD

2011-12-08 Thread Jimmy
I had a few weeks away from this configuration and finally getting back to it. I'm uncertain of the correct path forward. I don't seem to be able to find the documentation on how to install the cert into the Passsync NSS database. I have been following this document: http://freeipa.org/docs/1.2/In

Re: [Freeipa-users] synchronizing with AD

2011-11-11 Thread Rob Crittenden
Rich Megginson wrote: On 11/11/2011 02:23 PM, Jimmy wrote: I do have the AD SSL cert installed, but from how I read it, I need to install the cert from the FreeIPA DS into Windows AD certificate store. Perhaps for something else, but for windows sync/passsync, you do not need to install the cer

Re: [Freeipa-users] synchronizing with AD

2011-11-11 Thread Rich Megginson
On 11/11/2011 02:23 PM, Jimmy wrote: I do have the AD SSL cert installed, but from how I read it, I need to install the cert from the FreeIPA DS into Windows AD certificate store. Perhaps for something else, but for windows sync/passsync, you do not need to install the cert from the FreeIPA DS i

Re: [Freeipa-users] synchronizing with AD

2011-11-11 Thread Jimmy
I do have the AD SSL cert installed, but from how I read it, I need to install the cert from the FreeIPA DS into Windows AD certificate store. On Fri, Nov 11, 2011 at 3:33 PM, Rich Megginson wrote: > ** > On 11/11/2011 01:11 PM, Jimmy wrote: > > I am trying to get FreeIPA synchronizing with AD.

Re: [Freeipa-users] synchronizing with AD

2011-11-11 Thread Rich Megginson
On 11/11/2011 01:11 PM, Jimmy wrote: I am trying to get FreeIPA synchronizing with AD. The instructions I have found on the web go through setting up SSL for passsync, but they all reference installing the CA cert from the Directory Server without specifying how to go about getting the DS CA ce