-
Title
Quick Connect or Synchronization Service Capture Agents and Fedora FreeIPA Password Synchronization Service -
Description
The Fedora Project offers a free Password Synchronization Service for Active-Directory-to-Linux password synchronization. This service is described here:
Managing Password Synchronization
This service needs to be installed on all Domain Controllers in the environment, in a similar fashion to the Quick Connect Capture Agent.
-
Resolution
Having the Quick Connect Capture Agent and the FreeIPA Password Synchronization Service installed on the same Domain Controller at the same time is not a recommended or supported configuration due to the incompatibility issues listed below:
As of this writing FreeIPA Password Synchronization version 1.1.6 and prior installer overwrites the registration of the Quick Connect Capture Agent (and all other agents) at this registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages
Registration of the CaptureAgentPasswordFilter at this key is required in order for the Capture Agents to function as designed, and due to this incompatibility it renders the Capture Agents into a non-functioning state.