On 2016-01-22 11:25, Winfried de Heiden wrote:
> Now, is it possible to use the IPA-server as a proxy for the trusted
> Windows Domain? How...?

I haven't tried yet it but it should be possible. MS-KKDCP requests are
prefixed with the requested realm name. You have to configure the
mapping from real name to KDC on the *server*, too. The KDC Proxy
service uses /etc/krb5.conf to map realms to servers.

Please add a configuration for [realms] WINDOWS.EXAMPLE.COM on the IPA
server and restart Apache HTTPD. The configuration on IPA server must
use the Kerboers protocol over port 88 for KDC, 749 for kadmin and 464
for kpasswd. You can't use KDC Proxy here.


Attachment: signature.asc
Description: OpenPGP digital signature

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to