[Freeipa-users] FreeIPA customized for Kolab

[Petr Spacek]

On 4.7.2014 00:49, Carlos Raúl Laguna wrote:
> In cn=config
> a extensibleObject whit a domainRelatedObject and aci (require by kolab)
>
>
> Not sure what this means - does this mean you added objectclass:
> extensibleObject to dn: cn=config?
>
> Thanks for the fast reply, and Yes, it is required so kolab can check wish
> is the primary domain. Thanks for your answer. Regards
>
>
> 2014-07-03 18:12 GMT-04:00 Rich Megginson <rmeggins at redhat.com>:
>
>>   On 07/03/2014 04:09 PM, Carlos Raúl Laguna wrote:
>>
>> Hello everyone, for some time i was trying to make Kolab Groupwere to work
>> with FreeIPA and after some research is now working.

It would be great if you can write down what you did to a new wikipage, 
preferably linked from
http://www.freeipa.org/page/HowTos#3rd_party_Applications_Integration

Your normal Fedora account will allow you to edit Freeipa.org wiki.

Thank you for your time!

Petr^2 Spacek

>>
>>
>> Great!
>>
>>
>>   However the modification made in FreeIPA makes me wonder if some how
>> limit the functions of the software.
>>
>>
>> Changes Made:
>>
>>   Creation of
>> OU=Groups (Don't want to mix FreeIpa Groups whit Kolab's)
>> OU=Shared Folders (Requires by Kolab)
>> OU=Resources (Requires by Kolab)
>>
>>
>>   In cn=config
>> a extensibleObject whit a domainRelatedObject and aci (require by kolab)
>>
>>
>> Not sure what this means - does this mean you added objectclass:
>> extensibleObject to dn: cn=config?
>>
>>
>>
>> The user are created from Freeipa interface  name.surname wish result in a
>> mailbox for that user in the Kolab server.
>>
>> My actual question is if this may break  replication, or windows <->
>> freeipa forest relationship. Thanks in advance for your time. Regards
>>
>>
>> This should not break replication, nor windows trust/sync, afaik.  Not
>> sure what effect this will have on other parts of FreeIPA though.


-- 
Petr^2 Spacek