[Freeipa-users] sync passwords with AD or not per user

[Rich Megginson]

On 06/07/2011 03:29 PM, Steven Jones wrote:
> Hi,
>
> I thought with freeipa 2.0 it could only sync passwords?
Usually PassSync works in conjunction with Windows Sync - you first sync 
the users from AD to IPA, then when the AD password changes, PassSync 
finds the corresponding user in IPA (synced over by Windows Sync), then 
sends the updated password for that user.
> Basically our security manager wants stricter and stronger password control on our financial linux powered servers than is the policy set in AD, which is pathetic....
What sort of password control?  Minimum length?  Character classes?  
Password history checking?
> regards
> ________________________________________
> From: Rich Megginson [rmeggins at redhat.com]
> Sent: Wednesday, 8 June 2011 9:20 a.m.
> To: Steven Jones
> Cc: freeipa-users at redhat.com
> Subject: Re: [Freeipa-users] sync passwords with AD or not per user
>
> On 06/07/2011 03:03 PM, Steven Jones wrote:
>> Hi,
>>
>> Is it possible to set some users so they will not psswoard sync with AD while most do?
> Do you want the user data to sync, just not the passwords?
>> regards
>>
>> _______________________________________________
>> Freeipa-users mailing list
>> Freeipa-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-users