Re: [Freeipa-users] How grant access to userPassword for System Accounts

2015-10-27 Thread Alexander Bokovoy
elf but I saw that in documentation, IIRC. -- John Duino - Original Message - From: "Alexander Bokovoy" To: "John Duino" Cc: "freeipa-users" Sent: Tuesday, October 27, 2015 1:42:29 AM Subject: Re: [Freeipa-users] How grant access to userPassword for Syst

Re: [Freeipa-users] How grant access to userPassword for System Accounts

2015-10-27 Thread John Duino
n Duino" Cc: "freeipa-users" Sent: Tuesday, October 27, 2015 1:42:29 AM Subject: Re: [Freeipa-users] How grant access to userPassword for System Accounts On Mon, 26 Oct 2015, John Duino wrote: >I am trying to hook our VoIP solution (sipxecs-based openUC) to our >FreeIPA. But it a

Re: [Freeipa-users] How grant access to userPassword for System Accounts

2015-10-27 Thread Alexander Bokovoy
On Mon, 26 Oct 2015, John Duino wrote: I am trying to hook our VoIP solution (sipxecs-based openUC) to our FreeIPA. But it appears that it wants to read-in the userPassword rather than just auth against the ldap. I know Directory Manager is the only account that has the ability to read userPassw

Re: [Freeipa-users] How grant access to userPassword for System Accounts

2015-10-27 Thread Petr Spacek
gt;> From: "John Duino" >> To: "freeipa-users" >> Sent: Monday, October 26, 2015 5:41:47 PM >> Subject: [Freeipa-users] How grant access to userPassword for System Accounts >> >> I am trying to hook our VoIP solution (sipxecs-based openUC) to o

Re: [Freeipa-users] How grant access to userPassword for System Accounts

2015-10-26 Thread German Parente
ot;;allow (read,compare,search)(groupdn = "ldap:///");) Regards, German. - Original Message - > From: "John Duino" > To: "freeipa-users" > Sent: Monday, October 26, 2015 5:41:47 PM > Subject: [Freeipa-users] How grant access to userPassword for S

[Freeipa-users] How grant access to userPassword for System Accounts

2015-10-26 Thread John Duino
I am trying to hook our VoIP solution (sipxecs-based openUC) to our FreeIPA. But it appears that it wants to read-in the userPassword rather than just auth against the ldap. I know Directory Manager is the only account that has the ability to read userPassword, but is there a way to grant that t