[Pki-users] Authentication using ldap

Chandrasekar Kannan ckannan at redhat.com
Thu Oct 1 12:51:32 UTC 2009


On 10/01/2009 02:02 AM, Rashmi Pawar wrote:
> Hi,
> I have installed and configured the pki subsytems. I need to configure 
> it for user authentication using fedora directory server installed on 
> the same system. However in current environment all the user 
> information is stored on Windows Active Directory server and also the 
> authentication is being done by existing Windows AD server.
> In the console for administrator configuration: #pkiconsole 
> https:server.example.com:9445/ca 
> <http://server.example.com:9445/ca>    I searched if i could enter the 
> information of the AD server (that holds user information, that checks 
> if user is valid) in "Authentication" section of the console but did 
> not find one.
> I need to provide Windows ADS information in the authentication 
> section of console, where do I provide the same?,

You can't because we currently don't support this.

> or is there any other way for authenticating users as the user 
> information is based on another system (Windows AD Server)?

Yes. Setup a fedora directory server instance that automagically 
synchronizes users and passwords from windows active directory using our 
"Password Sync utility". A Howto is here - 
http://directory.fedoraproject.org/wiki/Howto:WindowsSync Downloads here 
- http://directory.fedoraproject.org/wiki/Download Once the initial sync 
to fedora directory server is complete , then you can use pkiconsole to 
authenticate to this instance.

Hope that helps.

thanks,
--Chandra


> Thanks
> Rashmi
> ------------------------------------------------------------------------
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users
>    

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20091001/c39e2043/attachment.htm>


More information about the Pki-users mailing list