> I'm very interested in implementing freeIPA as it matures and as we have > some breathing room after our initial product rollout. Is there any way > to do this without researching and deploying a new product? Anything > either built into 389 or PAM? Thanks - John FreeIPA uses a plugin to sync the passwords, you could in theory pull the plugin out of freeipa and add it to 389. I started working on doing this a few months ago and ran out of time. When I looked at it, a conversion didn't look like it would be that hard. -Nate -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users