[Freeipa-users] any disadvantages to using gssproxy?

2023-02-20 Thread Charles Hedrick via FreeIPA-users
We have a site where some users want to be able to run cron jobs with credentials so they can access files via NFS. We are currently using a local mechanism to generate those credentials. I'm considering using gssproxy instead. I've verified that it will work. Is there any disadvantage to

[Freeipa-users] One-Way Trust between two IPA Realms: Tips for debugging/further research?

2023-02-20 Thread Jostein Fossheim via FreeIPA-users
I know this is not officially supported. But I would still like to make it work. We have a main IPA-Realm EXAMPLE.COM, and we have subdomain LAB.EXAMPLE.COM as another IPA-Eealm. We wan't a one-way trust-relationship from the LAB-realm to our main realm. I have testet this with two