On Tuesday, March 03, 2015 02:41:58 PM Dmitri Pal wrote:
> On 03/03/2015 02:24 PM, Erinn Looney-Triggs wrote:
> > Before I go charging down this path too far, I wanted to figure out
> > whether it is possible for a RHEL 7 system to be a member of both an IPA
> > domain and a separate AD domain?
> > 
> > At this point trusts are not established between IPA and the AD, this will
> > happen around the 7.1 release, however, I would like the system to use IPA
> > for auth of things like ssh and the AD domain for auth of CIFS/SMB shares
> > via samba 4.
> > 
> > Is this possible? Anyone know? Seems like it should be.
> 
> It might be possible with some configuration hacks but we have not done
> them so it is not known. I suspect that the challenge will be making
> sure that SSSD and winbind do not step on each other regarding users.
> 
> 7.1 will allow you to do what you want via trust so it would be safer to
> wait a bit for it than to try to hack something with questionable
> probability of success.
> 
> > -Erinn

Are you questioning my hacking skills ;)

Thanks for the info, it looked possible but difficult, 7.1 should be out real 
soon now (tm), I'll wait.

-Erinn

Attachment: signature.asc
Description: This is a digitally signed message part.

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Reply via email to