[Freeipa-users] proxy with Active Directory

[Rob Crittenden]

Sylvain Angers wrote:
> Hello
> Our security group have concern with copying username/password from from
> AD and might not allow this synchronisation to even happen.
> Is there a way to configure ipa to go get username/password via kind of
> proxy?

No, the Kerberos credentials don't use the password attribute, it is 
effectively its own password altogether.

The password synchronization occurs over SSL/TLS.

rob