[Freeipa-users] Winsync

[Alexander Bokovoy]

On Tue, 27 Oct 2015, Tomas Babej wrote:
>
>
>On 10/27/2015 05:51 PM, Srdjan Dutina wrote:
>> Hi!
>>
>
>Hello Srdjan,
>
>> Is syncing (winsync) users and passwords from MS Active Directory
>> deprecated in FreeIPA 4.x?
>> If not, is there some documentation on how to use it?
>>
>
>Winsync synchronization is not deprecated as of now, but we are trying
>to move away from it in favor of the trust-based solution. I would
>certainly encourage you to try that before using winsync.
Documentation is in the 'Windows Integration Guide':
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/pt02.html

Chapter 7 covers winsync.

>> Additionaly, when using FreeIPA - AD trust, is it possible for user from
>> trusted domain to log on to FreeIPA web UI?
>
>Yes.
No. AD users cannot login to web UI. We are planning to add this
possibility in FreeIPA 4.4 or around that time, to allow AD users to
manage parts of their ID overrides.


-- 
/ Alexander Bokovoy