[Freeipa-users] winsync agreement

[Steven Jones]

Hi,

So I have 6.3 and just lost all my IPA users. So anyone on 6.2/6.3 until they upgrade after December's 6.4 could lose all their IPA users if they do a winsync agreement and dont twig to that option being essential if they dont have a std AD.   Not only that my admins are in a separate OU, so even if I had done a --win-subtree=cn=staff_users admins being elsewhere would have gone bye bye anyway.  

Luckily I hadnt disabled the admin account yet.....it was the only one left.

I guess this stuff is a lot more complex than it looks.

:/
 
regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

8><-----
will be fixed in RHEL 6.4 - not sure what you mean by "RHEL6 production
tree"
8><----