[Freeipa-devel] Please review: more patches for winsync support

Rich Megginson rmeggins at redhat.com
Fri Oct 3 20:25:36 UTC 2008


https://bugzilla.redhat.com/show_bug.cgi?id=459729
Resolves: bug 459729
Bug Description: Windows sync support in IPA - account disable and force 
sync

During testing, I found a few issues:

add winsync options to man page for ipa-replica-manage - 
https://bugzilla.redhat.com/attachment.cgi?id=319412&action=diff

ipa-replica-manage commands such as init, synch, and list did not work 
with windows sync agreements - 
https://bugzilla.redhat.com/attachment.cgi?id=319413&action=diff

before installing the Windows CA cert, I stop the server - this just 
makes the stop unconditional, since I don't care if the server is 
running or not - 
https://bugzilla.redhat.com/attachment.cgi?id=319414&action=diff

the ntUniqueID and ntUserDomainID indexes exist by default, so we just 
have to modify them to add eq,pres - 
https://bugzilla.redhat.com/attachment.cgi?id=319415&action=diff

the ipa-winsync plugin must start before MMR so that it can register the 
API that the winsync code uses - also, the slapi-nis plugin creates an 
entry just like the default IPA entry containing the default gidNumber 
to use, so I had (objectclass=groupOfNames) to the search filter - 
https://bugzilla.redhat.com/attachment.cgi?id=319416&action=diff
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20081003/bd53a981/attachment.bin>


More information about the Freeipa-devel mailing list