Hi Joerg,

>Question: Are there other ways to get the (almost) same result w/o having 
>admin access to AD?

No.

You will need to either:

1. Have your AD admins enter their domain admin password for you when you're 
running the ipa trust-add command

2. Have your AD admins give you a one time password to be used for this purpose.

I will note for option two, there was a bug in the past that prevented this 
from working with one-way trusts. The commands would complete however 
authentication and enumeration would never work.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to