Christopher Barry wrote:
Greetings, After reading chapter 19 of the RH docs about AD integration, I have a question regarding the 'lifetime' and locality of the plaintext password, and how this actually gets captured and sync'd. In a multi-site AD Enterprise, with a lot of DCs, would the password sync service need to run on every DC,
Yes.
Yes, that's the best way. You can point passsync at any master anywhere, as long as you are prepared to deal with latency issues (e.g. if you add a user then immediately change the password, you may have to wait for that new user to show up on your local replica first).with a partnership to the one master master Directory Server?
I'm wondering how if a user in Texas changes their password, it gets placed into the Directory Server Master in Pennsylvania.
The DS MMR protocol will update the password on all other DS servers.
Thanks, -C -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
<<attachment: smime.p7s>>
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
