Bliss, Aaron
2006-Oct-28 02:31 UTC
[Fedora-directory-users] Question on enabling ssl passync between windows and fds
Hi everyone, I''m attempting to get password synchronization to work between fds and active directory; per the following document http://directory.fedora.redhat.com/wiki/Howto:WindowsSync#Test_to_make_s ure_you_can_talk_SSL_from_Fedora_Directory_to_AD , I now have my AD box listening on port 636 as outlined in the section "With TinyCA2"; I have also installed a certificate for the fds box as prescribed here http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1085091 including the section marked "Trust the Cerficate Authority"; my question is, since both the AD box and FDS box trust my certificate authority setup with tinyCA, I believe then each box would inherently trust each other''s certificates? If so, have I already achieved the steps listed below the section marked "Enabling SSl for PASSSync" in the first document above, or do I still need to proceed with that section even though the AD box and FDS box have certificates signed from the same root CA? Thanks very much for your help with this. Aaron Confidentiality Notice: The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.
Nathan Kinder
2006-Oct-30 16:39 UTC
Re: [Fedora-directory-users] Question on enabling ssl passync between windows and fds
Bliss, Aaron wrote:> > Hi everyone, > I''m attempting to get password synchronization to work between fds and > active directory; per the following document > _http://directory.fedora.redhat.com/wiki/Howto:WindowsSync#Test_to_make_sure_you_can_talk_SSL_from_Fedora_Directory_to_AD_ > , I now have my AD box listening on port 636 as outlined in the > section "With TinyCA2"; I have also installed a certificate for the > fds box as prescribed here > _http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1085091_ > including the section marked "Trust the Cerficate Authority"; my > question is, since both the AD box and FDS box trust my certificate > authority setup with tinyCA, I believe then each box would inherently > trust each other''s certificates? If so, have I already achieved the > steps listed below the section marked "Enabling SSl for PASSSync" in > the first document above, or do I still need to proceed with that > section even though the AD box and FDS box have certificates signed > from the same root CA? Thanks very much for your help with this. >You still need to enable SSL for the PassSync service. PassSync uses it''s own certificate database, which is not the one that AD uses. This is why you need to set up SSL for PassSync separately from setting SSL up for AD. -NGK> > Aaron > > Confidentiality Notice: > The information contained in this electronic message is intended for > the exclusive use of the individual or entity named above and may > contain privileged or confidential information. If the reader of this > message is not the intended recipient or the employee or agent > responsible to deliver it to the intended recipient, you are hereby > notified that dissemination, distribution or copying of this > information is prohibited. If you have received this communication in > error, please notify the sender immediately by telephone and destroy > the copies you received. > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >