[Freeipa-users] Windows AD --> LDAP (oneWay)

[Gonzalo Fernandez Ordas]

Thanks very much for the quick reply. And that was exactly the bit I 
never fully understood, till now.

is it known anyway of synchronising the passwords? Any recommendations 
on those regards?

Thanks



On 12/03/2015 22:13, Rich Megginson wrote:
> On 03/12/2015 03:07 PM, Gonzalo Fernandez Ordas wrote:
>> Hi
>>
>> I have successfully setup an AD---> freeipa Model and joining bits 
>> and pieces from 389-ds I have setup a oneWaySinc fromWindows.
>> The issue I got for the last week is the pasword sync which does not 
>> seem to work at all, it does not matter what I do in the AD server I 
>> never get the passwords being transferred over.
>> I went through many manual pages, different versions and I do not 
>> have clear if I need to run any ldapmodification at all!
>> This will be a onewaySync and I do not want the passwords being 
>> replicated BACK to AD, also I read about the "reset" setting and I am 
>> not sure if every single password needs to be reset at all?
>>
>> has anybody got any sort of definitive guide or maybe a clear path to 
>> follow?
>
> http://www.port389.org/docs/389ds/howto/howto-windowssync.html#configuring-passsync 
>
>
> Note that you have to change a password in AD in order for it to be 
> sync'd to freeipa.  PassSync will not sync already existing password.s
>
>>
>> Many thanks for all your help
>>
>> Gonzalo
>>
>