[Freeipa-users] change directory manager password

[Rich Megginson]

On 12/10/2014 12:46 AM, Thomas Lau wrote:
> Hi All,
>
> So I am using FreeIPA 3.3.3, when I change password on one IPA host,
> the other clusters will in sync with the change or I need to do it one
> by one manually?

You have to do every server manually.  Changes to the cn=config tree are 
not replicated.

>
> On Wed, Dec 10, 2014 at 12:03 PM, Simo Sorce <simo at redhat.com> wrote:
>> On Tue, 09 Dec 2014 20:33:32 -0700
>> Rich Megginson <rmeggins at redhat.com> wrote:
>>
>>> On 12/09/2014 07:46 PM, Thomas Lau wrote:
>>>> By the way, if I change Directory manager password, do I need to do
>>>> anything else for replication cluster?
>>> http://www.port389.org/docs/389ds/howto/howto-resetdirmgrpassword.html
>>>
>>> Unless you are using directory manager for replication (please tell
>>> me you are not), you shouldn't have to do anything.
>> Given this is freeipa-users I assume ipa-replica-install/manage
>> converted his replication agreements to use GSSAPI :-)
>>
>> So, no, in FreeIPA replication doesn't care about the DM password.
>>
>> Simo.
>>
>> --
>> Simo Sorce * Red Hat, Inc * New York
>>
>> --
>> Manage your subscription for the Freeipa-users mailing list:
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Go To http://freeipa.org for more info on the project
>
>