I also am interested in this topic. We are planning to migrate to 389, but we have
multiple AD forests and will need to use password synchronization to one 389 LDAP
instance. I am not very familiar with 389 yet, so I would like to know if this is
possible.
Thanks,
Daniel Franciscus
Systems Administrator
Information Technology Group
Institute for Advanced Study
609-734-8138
----- Original Message -----
From: "Artur Oliveira" <artur.oliveira(a)gmail.com>
To: 389-users(a)lists.fedoraproject.org
Sent: Friday, June 6, 2014 10:51:39 AM
Subject: [389-users] Sync from multiple Active Directories and 389 Directory Server
I have an environment with multiple Active Directories Forests and several UNIX client
machines
I have another LDAP Directory to authenticate UNIX users.
The problem with this implementation is that the users used and passwords used to
authenticate in WIndows and Unix machines are different.
My idea is to use the Active Directories as main repositories for users and passwords.
I want to enable users of Active Directories to login in the UNIX client machines
(Solaris, Linux and AIX) using their regular windows users and passwords.
I have a requirement to have the UIDs and GIDs of UNIX users consistent across all UNIX
machines.
I am considering the use of 389 Directory Server to create a unique directory with the
users from both Active Directories and configure all the Unix clients to use this
directory.
I found several references to synchronisation between 389 Directory Server and Active
Directory however i found no reference to a configuration with multiple Active
Directories.
Is this possible ??
Does someone have some kind of suggestion to accomplish this goal ?
Thanks in advance
Artur
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users