Just for clarification,
If i create a user in Windows 2008R2 it propagates to Freeipa 4.1 because
freeIPA trust the AD domain, in this  scenario where AD equally trust the
freeIPA domain (Fedora 22), a user created in freeIPA should not propagate
as well to AD ? Regards


2015-05-22 16:39 GMT-04:00 Alexander Bokovoy <aboko...@redhat.com>:

> On Fri, 22 May 2015, Carlos Raúl Laguna wrote:
>
>> Hi Alexander
>> Great news, does this also mean that user created in freeipa are self
>> created/synchronized in the windows ad ? Regtards
>>
> With cross-forest trust we don't synchronize anything to AD. Think about
> it as if FreeIPA was a separate AD forest, two AD forests don't
> synchronize anything to each other, they _refer_ to each other's domain
> controllers for operations that require authentication or other changes.
>
> --
> / Alexander Bokovoy
>
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to