Re: [Freeipa-devel] [PATCHES] #1791 Tust Effort: Add support for generating MS-PAC

2011-11-07 Thread Simo Sorce
On Fri, 2011-11-04 at 23:31 +0100, Sumit Bose wrote: > On Fri, Nov 04, 2011 at 10:49:40AM -0400, Simo Sorce wrote: > > The attached patches are for master and concern the effort of creating > > trust relationships between IPA and AD domains. > > > > With these patches if you have run ipa-adtrust-i

Re: [Freeipa-devel] [PATCHES] #1791 Tust Effort: Add support for generating MS-PAC

2011-11-04 Thread Sumit Bose
On Fri, Nov 04, 2011 at 10:49:40AM -0400, Simo Sorce wrote: > The attached patches are for master and concern the effort of creating > trust relationships between IPA and AD domains. > > With these patches if you have run ipa-adtrust-install the IPA kdc will > be able to create a MS-PAC if the use

[Freeipa-devel] [PATCHES] #1791 Tust Effort: Add support for generating MS-PAC

2011-11-04 Thread Simo Sorce
The attached patches are for master and concern the effort of creating trust relationships between IPA and AD domains. With these patches if you have run ipa-adtrust-install the IPA kdc will be able to create a MS-PAC if the user has the right attributes ipaNTSecurityIdentifier on the user entry a