Rob, is this what you talking about? https://github.com/freeipa/freeipa/tree/master/daemons/ipa-slapi-plugins ?



Em qui., 30 de jan. de 2020 às 15:41, Rob Crittenden <rcritten@redhat.com> escreveu:
Lucas Diedrich via FreeIPA-users wrote:
> Thanks RC, right now i'm using lsc-project.org <http://lsc-project.org>
> for that, it has some technical flaws but actually works.
>
> I thought about migrating all users to AD and use passsync, to replicate
> the password but i didn't know that it was closed to redhat
> subscription. Also thought about creating the plugin over Directory 389
> but the documentation doesn't seem easy to-do.
>
> Actually i'm strungling to maintain my Freeipa Server with 11k  userss
> as the principal manager over here.

You could probably extend the IPA password plugin to write the
UnicodePwd attribute in the correct format. There are existing examples
in the code such as setting the sambaNTPassword attribute.

rob

>
> Thanks.
>
>
>
> Em qua., 29 de jan. de 2020 às 15:59, Rob Crittenden
> <rcritten@redhat.com <mailto:rcritten@redhat.com>> escreveu:
>
>     LUCAS GUILHERME DIEDRICH via FreeIPA-users wrote:
>     > Hello guys, is there any change for storing the password over
>     freeipa it generate an password with the unicodepwd format?
>
>     No, it is not supported currently.
>
>     >
>     > I'm still trying to replicate some users from freeipa to AD, i
>     would like to mantain my Freeipa as the principal manager for users
>     and groups.
>
>     How are you replicating IPA users to AD?
>
>     rob
>
>
>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>