Hey, I have problem with password's synchronization between Fedora Directory Server (1.0.4) and Active Directory (2003). I read wiki (Howto:WindowsSync) and setup up synchronization arrangement. Without PassSync everything is ok. I can synchronize users both ways from AD -> FDS and FDS-> AD. But if I install PassSync I can notice strange behavior: 1. I change user's password in FDS 2. Password is populated to AD 3. !!! PassSync recognize that password was changed !!! 4. PassSync populate password to FDS 5. FDS recognize that password was changed and realize step 2 - and it's repeating ! Anybody has any idea what is wrong ?
Dans
Not sure what the problem is but passync is designed to avoid this loop : it attempts to bind to fds with the new password before propagating it back. If the bind succeeds it concludes there is a loop and refrains from sending the change to FDS. At least that's what should happen. You might look in the FDS log to see what operations passsync is performing. If it's failing for some reason to do the bind correctly then that would break the loop detection logic.
Dans wrote:
Hey, I have problem with password's synchronization between Fedora Directory Server (1.0.4) and Active Directory (2003). I read wiki (Howto:WindowsSync) and setup up synchronization arrangement. Without PassSync everything is ok. I can synchronize users both ways from AD -> FDS and FDS-> AD. But if I install PassSync I can notice strange behavior:
- I change user's password in FDS
- Password is populated to AD
- !!! PassSync recognize that password was changed !!!
- PassSync populate password to FDS
- FDS recognize that password was changed and realize step 2 - and
it's repeating ! Anybody has any idea what is wrong ?
Dans
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
Dans wrote:
Hey, I have problem with password's synchronization between Fedora Directory Server (1.0.4) and Active Directory (2003). I read wiki (Howto:WindowsSync) and setup up synchronization arrangement. Without PassSync everything is ok. I can synchronize users both ways from AD -> FDS and FDS-> AD. But if I install PassSync I can notice strange behavior:
- I change user's password in FDS
How did you change the password? Are you sure that a pre-hashed password was not stored (e.g. pam_ldap with md5)?
- Password is populated to AD
- !!! PassSync recognize that password was changed !!!
- PassSync populate password to FDS
- FDS recognize that password was changed and realize step 2 - and
it's repeating ! Anybody has any idea what is wrong ?
Dans
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
389-users@lists.fedoraproject.org