Re: Password synchronisation beetween openldap and AD 2008 R2

Louis-Marie Plumel <louismarie.plumel@xxxxxxxxx> · Thu, 16 Jan 2014 16:55:07 +0100

        Ok ok, i'm going to see what you sent to me . To be
            sure, is  389DS may be an intermediate
            between my two actual servers?

    Not sure what you mean here.

Is my actual LDAP can be used by 389DS? I'm sorry for these requests i'm novice in this domain....

2014/1/16 Rich Megginson <rmeggins@xxxxxxxxxx>

    On 01/16/2014 08:12 AM, Louis-Marie
      Plumel wrote:

        Ok ok, i'm going to see what you sent to me . To be
            sure, is  389DS may be an intermediate
            between my two actual servers?

    Not sure what you mean here.

        I
              have to keep my actual LDAP and  remain
              the master and
              synchronization must be a single
            direction (LDAP -> AD).

    389 supports one way sync.

        Will
              users have to change their password?

    Yes, unfortunately.

        My
              goal is that everything will be
            transparent.

    Then you may want to look into IPA with AD cross domain trust as
    Petr suggested.

        regards

        2014/1/16 Petr Spacek <pspacek@xxxxxxxxxx>

            On 16.1.2014 15:59, Rich Megginson wrote:

                On 01/16/2014 07:57 AM, Louis-Marie Plumel wrote:

                  Hello,

                  Actually , i work with openldap.

                  I've installed an AD 2008 R2.My challenge is to work
                  with both and

                  synchronise LDAP and AD 2008 R2. After a long research
                  on the web, i don't

                  find any information about howto synchronise passwords
                  . That's why i come

                  here to see if with 389 DS it's possible or not.

                Yes.

                https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Windows_Sync.html

            There is also one completely different option: Use trust
            between AD and Unix domain. It depends on your requirements
            ...

            See

            http://www.freeipa.org/page/Trusts

            or join mailing list

            https://www.redhat.com/mailman/listinfo/freeipa-users

            Have a nice day!

                -- 

                Petr^2 Spacek

                --

                389 users mailing list

                389-users@xxxxxxxxxxxxxxxxxxxxxxx

                https://admin.fedoraproject.org/mailman/listinfo/389-users

        -- 

        Louis-Marie Plumel

        louismarie.plumel@xxxxxxxxx

      --
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--

389 users mailing list

389-users@xxxxxxxxxxxxxxxxxxxxxxx

https://admin.fedoraproject.org/mailman/listinfo/389-users

-- 
Louis-Marie Plumel

louismarie.plumel@xxxxxxxxx

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users