No, logging into Windows AD clients using IPA credentials is not currently 
supported.  This functionality is currently under development.

See this thread [1] for more information.



[] On Behalf Of Josh Pospisil
Sent: Wednesday, February 03, 2016 12:18 PM
Subject: [Freeipa-users] FreeIPA / AD Trust Relationship

I have successfully set up a trust between AD (windows server 2012) and freeIPA 
following this guide:

My hope in doing this was to allow the users I have created on the freeIPA 
server to logon to our windows computers without recreating all of the users in 
AD, but this is not working.  Can anyone verify whether or not this should be 
true or does the trust only work the opposite direction?  If it should be true, 
can anyone offer any tips for troubleshooting?

When I try to verify the trust on the AD server, I get the following error: 
"There are currently no logon servers available to service the logon request."

Dns was setup as described in the guide above.

Thanks in advance for any help.

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to