On Thu, 2012-12-13 at 09:21 +0100, Petr Spacek wrote: > > No trusts are better with completely separate root domains, they > > certainly can't work if you use the same domain. > Simo, can you elaborate this? I'm not experienced with trusts, but > IMHO there > should not be any difference between scenarios a) and b). > Correct, what I meant is that you can;t use the same domain for both AD and FreeIPA (so be careful if you use only the AD DNS server to create a separate DNS domain in AD DNS for freeIPA).
Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ Freeipa-users mailing list Freeipafirstname.lastname@example.org https://www.redhat.com/mailman/listinfo/freeipa-users