[Freeipa-users] Re: Azure AD / Azure AD Connect / FreeIPA sync

2022-04-26 Thread Alexander Bokovoy via FreeIPA-users
On ti, 26 huhti 2022, Mike Mercier wrote: Hi Alexander, On Thu, 7 Apr 2022 at 09:30, Alexander Bokovoy wrote: On to, 07 huhti 2022, Mike Mercier wrote: >Hi, > >The following microsoft document > > https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/sync-ldap > >states it is p

[Freeipa-users] Re: AD Trust with multiple replicas

2022-04-26 Thread Cyrus via FreeIPA-users
El sáb, 23 abr 2022 a las 23:55, Alexander Bokovoy () escribió: > > On la, 23 huhti 2022, Cyrus via FreeIPA-users wrote: > >Hello!, > > > >I'm looking to deploy a multisite setup of FreeIPA, it would be 4 > >sites and 2 nodes per site. Alongside FreeIPA, there will also be: > >- a pair of Samba4 co

[Freeipa-users] Trouble with IPA tools

2022-04-26 Thread Victoria Fierce via FreeIPA-users
Howdy. I've been a long-time user of freeipa and have had a small instance running at home via fedora packages for the past 5 years or so. Its actually hard to know just how long I've had it running, but that's besides the point; for what feels like ages I've never had to really mess with it a

[Freeipa-users] Re: Azure AD / Azure AD Connect / FreeIPA sync

2022-04-26 Thread Mike Mercier via FreeIPA-users
Hi Alexander, On Thu, 7 Apr 2022 at 09:30, Alexander Bokovoy wrote: > On to, 07 huhti 2022, Mike Mercier wrote: > >Hi, > > > >The following microsoft document > > > > > https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/sync-ldap > > > >states it is possible (with a warning) to

[Freeipa-users] FreeIPA 4.9.9

2022-04-26 Thread Antonio Torres via FreeIPA-users
The FreeIPA team would like to announce FreeIPA 4.9.9 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. == Highlights in 4.9.9 * 6524: Vault key archival using AES The vault plugin n

[Freeipa-users] Re: Strategy to renew TGT - any thoughts?

2022-04-26 Thread Eric Ashley via FreeIPA-users
Hi Francis, I think with a minor change of logic this issue is rather simple with a bit of scripting and some user training. Rather than getting a new ticket after the old one expires, look for a ticket that expires within X minutes where your other renewal criteria are still met. While that