On 08/17/2015 02:58 PM, Martin Babinsky wrote:
On 08/06/2015 10:55 AM, Tomas Babej wrote:

When IPA is deployed in the same domain as AD, trust-add fails since
the names of the local domain and trusted domain ranges is the same
- it's always DOMAIN.NAME_id_range.

When adding a trusted domain, we look for previous ranges for
this domain (which may have been left behind by previous trust
attempts). Since AD and IPA are in the same domain, we find
a local domain range, which does not have a SID.

Detect such domain collisions early and bail out with an appropriate
error message.



Pushed to:
master: 9ce074b36a54a450c91ac0151c345481da120290
ipa-4-2: 5fd2a893e65ba6cc888de930f76b2e48ba460b8d

Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to