Christopher Barry wrote:
Greetings,After reading chapter 19 of the RH docs about AD integration, I have a question regarding the 'lifetime' and locality of the plaintext password, and how this actually gets captured and sync'd. In a multi-site AD Enterprise, with a lot of DCs, would the password sync service need to run on every DC,
Yes.
Yes, that's the best way. You can point passsync at any master anywhere, as long as you are prepared to deal with latency issues (e.g. if you add a user then immediately change the password, you may have to wait for that new user to show up on your local replica first).with a partnership to the one master master Directory Server?
I'm wondering how if a user in Texas changes their password, it gets placed into the Directory Server Master in Pennsylvania.
The DS MMR protocol will update the password on all other DS servers.
Thanks, -C -- Fedora-directory-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/fedora-directory-users
smime.p7s
Description: S/MIME Cryptographic Signature
-- Fedora-directory-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/fedora-directory-users
