Rich - Yes, this does work. I believe password change requests in Active Directory are sent to various domain controllers on a somewhat random basis. If true, this means that Passsync must be installed (along with appropriate SSL certificates) on all domain controllers in an AD domain in order to get dependable password sync with Fedora Directory. This is what I've done, and it does seem to work now. Thanks. -G. ---------- Original Message ----------- From: Rich Megginson <rmeggins at redhat.com> To: "General discussion list for the Fedora Directory server project." <fedora-directory-users at redhat.com> Sent: Wed, 07 Jan 2009 08:19:19 -0700 Subject: Re: FD-AD Password Sync Trouble > Glenn wrote: > > We have Windows Sync replication set up between Fedora Directory 1.04 and > > Active Directory. When we change a user's password in FD, it replicates to > > AD. When we change a user's password on the AD server, it replicates to FD. > > > > But when we change the user's password on the user's local AD computer (using > > Ctrl-Alt-Del, Change Password), the password is changed in AD but does not > > replicate to FD. Anyone know how to fix this? Thanks. -G. > > > You probably need to install passsync on the domain controller that > this particular password change operation is sent to. > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users at redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > ------- End of Original Message -------