[Freeipa-users] synchronizing with AD

Sigbjorn Lie sigbjorn at nixtra.com
Thu Dec 8 21:37:47 UTC 2011


Hi Jimmy,

I believe this is the documentation for the old IPA 1 version. You'll 
find the updated guide at the link below. I used this guide for 
configuring IPA <-> AD sync.

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/index.html


Regards,
Siggi


On 12/08/2011 10:31 PM, Jimmy wrote:
> I had a few weeks away from this configuration and finally getting 
> back to it. I'm uncertain of the correct path forward. I don't seem to 
> be able to find the documentation on how to install the cert into the 
> Passsync NSS database. I have been following this document:
>
> http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/chap-Installation_and_Deployment_Guide-Setting_up_Synchronization_Between_IPA_and_Active_Directory.html
>
> We are attempting to replicate users from an AD instance to FreeIPA,
> Thanks- Jimmy
>
> On Fri, Nov 11, 2011 at 4:55 PM, Rob Crittenden <rcritten at redhat.com 
> <mailto:rcritten at redhat.com>> wrote:
>
>     Rich Megginson wrote:
>
>         On 11/11/2011 02:23 PM, Jimmy wrote:
>
>             I do have the AD SSL cert installed, but from how I read
>             it, I need to
>             install the cert from the FreeIPA DS into Windows AD
>             certificate store.
>
>         Perhaps for something else, but for windows sync/passsync, you
>         do not
>         need to install the cert from the FreeIPA DS into Windows AD
>         certificate
>         store.
>
>
>     Right, you just need to install it in the Passsync NSS databsae.
>
>     rob
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20111208/d5f4d20c/attachment.htm>


More information about the Freeipa-users mailing list