On 3/25/19 3:39 PM, mustafa taha via FreeIPA-users wrote:
Hi
i have integrated a FreeIPA domian with an Active Directory domain by synchronization
.
Hi,
do you mean that you followed this documentation: "Integrating a Linux
Domain with an Active Directory Domain: Synchronization" [1]?
but my problem is that when i add user to AD , its sync user data
and password to FreeIPA.
but when i update the user password , the FreeIPA hadn't generated ipantHash
attribute until i ran ipa-adtrust-install for each new user and change the user
password again.
so is there a way to make the FreeIPA to generate ipantHash attribute for the new users
without run ipa-adtrusrt-install for each user addition in AD ?
ipa-adtrust-install should not be used in this scenario. This command is
used when integration is performed with a cross-forest trust [2].
Synchronization operations run every 5 minutes, but password
synchronization changes should take effect immediately. Do you see
issues with passwd sync on both directions or only from IPA to AD? Did
you follow the instructions at "Managing password synchronization" [3]?
flo
[1]
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
[2]
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
[3]
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>