<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
On 10/01/09 05:51, Chandrasekar Kannan wrote:
<blockquote cite="mid:4AC4A5D4.6060603@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
On 10/01/2009 02:02 AM, Rashmi Pawar wrote:
<blockquote
cite="mid:816962df0910010202j22f5221dw80b2eeff11327bce@mail.gmail.com"
type="cite">
<div>Hi,</div>
<div> </div>
<div>I have installed and configured the pki subsytems. I need to
configure it for user authentication using fedora directory server
installed on the same system. However in current environment all the
user information is stored on Windows Active Directory server and also
the authentication is being done by existing Windows AD server. </div>
<div> </div>
<div>In the console for administrator configuration: #pkiconsole
https:<a moz-do-not-send="true" href="http://server.example.com:9445/ca">server.example.com:9445/ca</a>
I
searched if i could enter the information of the AD server (that
holds user information, that checks if user is valid) in
"Authentication" section of the console but did not find one.</div>
<div> </div>
<div>I need to provide Windows ADS information in the
authentication
section of console, where do I provide the same?, </div>
</blockquote>
<br>
You can't because we currently don't support this.<br>
</blockquote>
but you could write your own authentication plug-in.<br>
<blockquote cite="mid:4AC4A5D4.6060603@redhat.com" type="cite"><br>
<blockquote
cite="mid:816962df0910010202j22f5221dw80b2eeff11327bce@mail.gmail.com"
type="cite">
<div>or is there any other way for authenticating users as the user
information is based on another system (Windows AD Server)?</div>
</blockquote>
<br>
Yes. Setup a fedora directory server instance that automagically
synchronizes users and passwords from windows active directory using
our "Password Sync utility". A Howto is here -
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://directory.fedoraproject.org/wiki/Howto:WindowsSync">http://directory.fedoraproject.org/wiki/Howto:WindowsSync</a>
Downloads
here - <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://directory.fedoraproject.org/wiki/Download">http://directory.fedoraproject.org/wiki/Download</a>
Once the
initial sync to fedora directory server is complete , then you can use
pkiconsole to authenticate to this instance.<br>
<br>
Hope that helps.<br>
<br>
thanks,<br>
--Chandra<br>
<br>
<br>
<blockquote
cite="mid:816962df0910010202j22f5221dw80b2eeff11327bce@mail.gmail.com"
type="cite">
<div> </div>
<div>Thanks</div>
<div>Rashmi </div>
<pre wrap=""><hr size="4" width="90%">
_______________________________________________
Pki-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a>
</pre>
</blockquote>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
Pki-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a>
</pre>
</blockquote>
<br>
</body>
</html>