----- On Aug 9, 2016, at 2:09 PM, Jakub Hrozek jhro...@redhat.com wrote:


>> 
>> So, I currently works in the current RedHat (sssd-ipa-1.13.0-40.el7_2.12) but
>> only on the server, but not on a pure IPA client, but will work in 1.14.0 ?
> 
> I would not recommend this setting on the server, even with 1.14,
> because some components of the stack rely on the name of trusted users
> being qualified, namely the compat plugin IIRC parses the names.
> 
> But on clients, this should work.
> 
>> 
>> I guess this will be included in RedHat 7.3?
> 
> Yes.

I guess I have hit some sort of configuration parameter combination that made 
it not work......  I have removed the full_name_format on the server, but kept
"ldap_user_principal = nosuchattr" and
"subdomain_inherit = ldap_user_principal" on both server untill 7.3 arrives.

This seems to work.


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to