Hi, I have installed and configured the pki subsytems. I need to configure it for user authentication using fedora directory server installed on the same system. However in current environment all the user information is stored on Windows Active Directory server and also the authentication is being done by existing Windows AD server. In the console for administrator configuration: #pkiconsole https:server.example.com:9445/ca <http://server.example.com:9445/ca> I searched if i could enter the information of the AD server (that holds user information, that checks if user is valid) in "Authentication" section of the console but did not find one. I need to provide Windows ADS information in the authentication section of console, where do I provide the same?,

or is there any other way for authenticating users as the user information is based on another system (Windows AD Server)?

Thanks Rashmi ------------------------------------------------------------------------ _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users

On 10/01/09 05:51, Chandrasekar Kannan wrote: On 10/01/2009 02:02 AM, Rashmi Pawar wrote: Hi, I have installed and configured the pki subsytems. I need to configure it for user authentication using fedora directory server installed on the same system. However in current environment all the user information is stored on Windows Active Directory server and also the authentication is being done by existing Windows AD server. In the console for administrator configuration: #pkiconsole https: server.example.com:9445/ca I searched if i could enter the information of the AD server (that holds user information, that checks if user is valid) in "Authentication" section of the console but did not find one. I need to provide Windows ADS information in the authentication section of console, where do I provide the same?, You can't because we currently don't support this. but you could write your own authentication plug-in. or is there any other way for authenticating users as the user information is based on another system (Windows AD Server)? Yes. Setup a fedora directory server instance that automagically synchronizes users and passwords from windows active directory using our "Password Sync utility". A Howto is here - http://directory.fedoraproject.org/wiki/Howto:WindowsSync Downloads here - http://directory.fedoraproject.org/wiki/Download Once the initial sync to fedora directory server is complete , then you can use pkiconsole to authenticate to this instance. Hope that helps. thanks, --Chandra Thanks Rashmi ------------------------------ _______________________________________________ Pki-users mailing listPki-users@redhat.comhttps://www.redhat.com/mailman/listinfo/pki-users ------------------------------ _______________________________________________ Pki-users mailing listPki-users@redhat.comhttps://www.redhat.com/mailman/listinfo/pki-users