Hello everyone,
It would be possible to create a scenario where 389 ds became a box for all users through winsync and replication,We have some users in Windows AD and some other in Freeipa, however we are looking a way to put together all the user in one place 389 DS, (just the users) to create a single email system for all users. Any input will be appreciated. Regards
Why not use freeipa's AD trust features?
William
On 27 May 2015, at 05:42, Carlos Raúl Laguna carlosla1987@gmail.com wrote:
Hello everyone,
It would be possible to create a scenario where 389 ds became a box for all users through winsync and replication,We have some users in Windows AD and some other in Freeipa, however we are looking a way to put together all the user in one place 389 DS, (just the users) to create a single email system for all users. Any input will be appreciated. Regards
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
Hello William,
The problem with that approach is, user will not be in the same place, some users will be in AD other in FreeIPA and the actual need is to use Kolab groupware as email system for all user however kolab have some special attribute that need to be present in all user to work properly. Any ideas. Regards
2015-05-27 3:09 GMT-04:00 William william@firstyear.id.au:
Why not use freeipa's AD trust features?
William
On 27 May 2015, at 05:42, Carlos Raúl Laguna carlosla1987@gmail.com
wrote:
Hello everyone,
It would be possible to create a scenario where 389 ds became a box for
all users through winsync and replication,We have some users in Windows AD and some other in Freeipa, however we are looking a way to put together all the user in one place 389 DS, (just the users) to create a single email system for all users. Any input will be appreciated. Regards
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
On Wed, 2015-05-27 at 13:02 -0400, Carlos Raúl Laguna wrote:
Hello William,
The problem with that approach is, user will not be in the same place, some users will be in AD other in FreeIPA and the actual need is to use Kolab groupware as email system for all user however kolab have some special attribute that need to be present in all user to work properly. Any ideas. Regards
If that is the case you could do winsync to pull in the AD users, you may also be able to do fractional replication with FreeIPA to pull in those users. You could use MEP to add templates of the bits needed for the kolab groupware as well.
You may want to check with the FreeIPA users list if fractional replication like this is supported.
From: "Carlos Raúl Laguna" carlosla1987@gmail.com To: "General discussion list for the 389 Directory server project." 389-users@lists.fedoraproject.org Sent: Wednesday, May 27, 2015 1:02:23 PM Subject: Re: [389-users] 389 ds as main object for storage all users
Hello William,
The problem with that approach is, user will not be in the same place, some users will be in AD other in FreeIPA and the actual need is to use Kolab groupware as email system for all user however kolab have some special attribute that need to be present in all user to work properly. Any ideas. Regards
With IPA trust set up, you can have local IPA users and AD users in the same environment. I'm not 100% sure on the order of operations, but a lookup will be performed against IPA then forwarded on to the trust, or vice versa. But you should be able to have an environment with both users in IPA and users in AD. Here's some information on how to set it up if you're interested in giving it a test: . https://www.freeipa.org/page/Active_Directory_trust_setup
-- David
2015-05-27 3:09 GMT-04:00 William < william@firstyear.id.au > :
Why not use freeipa's AD trust features?
William
On 27 May 2015, at 05:42, Carlos Raúl Laguna < carlosla1987@gmail.com > wrote:
Hello everyone,
It would be possible to create a scenario where 389 ds became a box for all users through winsync and replication,We have some users in Windows AD and some other in Freeipa, however we are looking a way to put together all the user in one place 389 DS, (just the users) to create a single email system for all users. Any input will be appreciated. Regards
--
389 users mailing list
389-users@lists.fedoraproject.org
--
389 users mailing list
389-users@lists.fedoraproject.org
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
389-users@lists.fedoraproject.org
-
Carlos Raúl Laguna -
Dave Sirrine -
William