-----BEGIN PGP SIGNED MESSAGE-----
On 11/09/2009 05:35 PM, Sumit Bose wrote:
this patch adds a separate IPA authentication target which glues together
Kerberos and LDAP authentication to support IPA password migration.
To test this patch the following two uncommitted patches are needed on
the server side:
- "Allow adding entries with pre-hashed passwords, but don't generate
keys for them."
- "Add BIND pre-op for DS->IPA password migration to ipa-pwd-extop DS
There is a TODO left, namely to read from the DS if password migration
in enabled or not. Is there already a place where this information can
We've talked about this differently in different places, so I'm not sure
there's yet a consensus about how to handle this. On the password
migration wiki, we talk about this being a client-side option, but I
think it makes far more sense for this to be stored in the IPA DS, so
that it can be globally configured for all IPA clients.
I'm adding Rob and Pavel to this list so they can comment on the ease or
difficulty of supporting this on the server-side.
sssd-devel mailing list
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
-----END PGP SIGNATURE-----