On 11/07/2016 09:11 PM, James Harrison wrote:
Sorry didn't explain. The ipa is the default domain, but I also want to
use the Windows domain to authenticate, but I want the OS to detect what
realm to use in the ssh command.


    On Mon, 7 Nov, 2016 at 11:48, Martin Basti
    <mba...@redhat.com> wrote:

    AFAIK Jakub already answered that

    On 07.11.2016 12:05, James Harrison wrote:
    Anyone ?

    Sent from Yahoo Mail on Android

        On Fri, 4 Nov, 2016 at 11:04, James Harrison
        <jamesaharriso...@yahoo.co.uk> wrote:

        I've installed FreeIPA 4.2 master using Centos and I have a
        Windows 2012R2 with its AD schema emulating a Windows 2012 system

        I have established a trust between the two and it appears to
        work. I can reference a user on the AD domain, but the only
        way is to add the AD domain.

        The only way to ssh to the master IPA server is like this:

        ssh "x_xxxx@IPAWIN.LOCAL"@

        Another example is using kinit:

        I have to do the following to get a credential:
        kinit x_xxxx@IPAWIN.LOCAL

        Ideally I would not need or use the "@IPAWIN.LOCAL".

        Can anyone help?

        Best regards,
        James Harrison

Hi James,

as Jakub pointed out you may have to wait for the next release of SSSD for this to work.

Martin^3 Babinsky

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to