[389-users] Re: Syncing DS 389's userPassword with Samba 4's sambaNTPassword
On 3/8/19 4:58 AM, Janet Houser wrote:
Thanks!
I read that but I can't switch to freeipa since that software doesn
support a hash needed with gsync.
hmmmm...... I wonder if I could sync the user/password DB to freeipa
and then use that to serve out samba shares.....
I don't think FreeIPA generates password hashes outside of the
directory. I'd expect it to store whatever hash you configure 389 DS to
store, if you change that setting directly in the directory service.
On the other hand, I wouldn't recommend syncing password hashes at all.
Google Cloud supports third-party SSO using SAML 2.0. You should be able
to use GCDS to sync your user accounts, and use SAML for authentication.