Hello
We have made the recommended changes by updating
ignore_group_members = True
subdomain_inherit = ignore_group members
in the [domain/...] section on IPA servers and clients
and updated
refresh_expired_interval = 4000
Unfortunately we are still unable to log in to IPA clients using AD
Am Wed, Dec 13, 2023 at 11:49:00PM + schrieb Ostrom, Erik via FreeIPA-users:
> Hi,
>
> I'm having some issues ssh'ing as an AD user to a freeipa client, but I can
> successfully ssh as the same user to the IPA master.
> Our IPA domain, ipa.subdomain.contoso.com, is set up with a one-way
