On 3.7.2016 14:19, Günther J. Niederwimmer wrote: > Hello, > > Is it possible to create a kerberos Ticket for a secondary domain ? > > CentOS 7.2 IPA 4.3.1 > My installing, > I have a IPAServer for > > Domain > test.com > > LDAP & Kerberos > TEST.COM > > now i like to include a other Domain > new.net > > Is it possible to have for this domain also a kerberos ticket ? > > I found a example in a krb5.conf like this > [domain_realm] > .test.com = TEST.COM > .new.net = TEST.COM > ... > > is this possible with FreeIPA ?
One FreeIPA instance always represents one Kerberos REALM. At the same time multiple DNS domains can belong to one FreeIPA REALM. See command 'ipa realmdomains'. -- Petr^2 Spacek -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project