I just joined this list so please excuse if this question has been asked
Is anyone out there binding mac clients (10.7.x) to IPA?
I have tried it with some success. The mac-client can join the IPA domain and
the Kerberos domain but no user from the domain can log in to the mac-computer.
My guess is that I need to map the LDAP values from IPA with what the
Freeipa-users mailing list