On to, 23 elo 2018, Michal Sladek via FreeIPA-users wrote:
Hello,
I would like to use IPA server in heterogeneous environment with Linux servers
and Windows workstations.
IPA domain would be used as a primary source of users and groups.
AD domain would be used for management of Widows hosts only (group policies
etc.).
I have setup a test network with two-trust between AD and IPA domain
and realized, that IPA domain sees AD users but AD domain doesn't see
IPA users. Am I missing something or the two-way trust is not two-way
in fact?
It is two-way in principle. However, FreeIPA does not implement features
required by AD DC to resolve IPA users on Windows workstations. It is on
our long term roadmap.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/OJCXN7VI2NZAUWUHVZDKEZB7SF72NSR2/
