389-users November 2007

389-users@lists.fedoraproject.org

41 participants
45 discussions

[Fedora-directory-users] multiple AD servers and password sync
by Aaron Oas 05 Nov '07

05 Nov '07

Apologies if this has been covered before somewhere. I am trying to implement AD <--> FDS syncronization, and don't understand what I need to do about setting up the Password Sync on the AD server when there are (in my case) 3 AD servers. >From reading the docs, and from my understanding of how windows clients bind to AD server to change their passwords, it appears that password sync needs to be installed on every AD server to catch an interactive password change from a windows client which has bound to any one of 3 AD servers. For example: AD servers are all serving one domain AD1 (password sync --> FDS1, sync agreement <--> FDS1) AD2 (no password sync) AD3 (no password sync) FDS servers have 1 master/supplier, one replica/consumer FDS1 (win sync <--> AD1, supply --> FDS2) FDS2 So, if win client talks to a non-passwordsync AD3 and changes password, then AD3 synchronizes to AD1, then password sync hooks on AD1 can't understand the already windows-encrypted password from AD3 because it's not part of the initial interactive password change. If that's true, then I definitely have to have Password Sync on every AD server, along with the certs etc etc. Is this the case? A collateral question is: what happens if you have 3 AD servers with sync agreements to an FDS server? Will you get 3 updates to FDS on the same user change? Will FDS updates sent to all 3 AD servers result in trouble as the AD servers subsequently sync to each other? - Aaron

1 0

[Fedora-directory-users] add users
by Zahra Bahar 05 Nov '07

05 Nov '07

Hi all, I installed fedora ds and have noe console, but when I want to add a user it makes this error: can not save to directory server. java.lang.illegalArgumentExeption what should I do?

2 1

[Fedora-directory-users] problem with ldapsearch
by Elisa Pellegrini 05 Nov '07

05 Nov '07

Hi! I have a problem with ldapsearch -x command! I'm not able to see all the attribute of my user,in particular his password(the hash of password). The problem is ACL or ACI set. What I must modify? Thanks!

2 1

[Fedora-directory-users] One way replication from Active Directory
by Nikolay Fomichev 01 Nov '07

01 Nov '07

Can FDS only replicate LDAP data from Active Directory, not sync? I find in Archive that it may be posible with Database Link to AD http://osdir.com/ml/redhat.fedora.directory.user/2006-10/msg00132.html But it was about a year ago, and i think that exist another way. And can i choose what attribute to replicate from AD(mapping) ?

1 0

Re: [Fedora-directory-users] Question about caseIgnoreIA5Match
by Balaji Ganesan 01 Nov '07

01 Nov '07

From: Richard Megginson <rmeggins(a)redhat.com> > > rm> Did you re-index the attribute after making that change? Thanks. re-indexing after changing type to Directory String fixed the problem. Should I just use Directory String instead of IA5String?

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users November 2007