Re: [Freeipa-users] Recomendations on multi-domain environments

2013-09-23 Thread Petr Spacek
On 20.9.2013 17:36, Dmitri Pal wrote: On 09/18/2013 07:55 AM, Andrew Lau wrote: On Wed, Sep 18, 2013 at 9:40 PM, Arturo Borrero aborr...@cica.es mailto:aborr...@cica.es wrote: Hi there! This is my situation. I have some users of my main domain cica.es http://cica.es.

Re: [Freeipa-users] Recomendations on multi-domain environments

2013-09-23 Thread Arturo Borrero
On 23/09/13 09:04, Petr Spacek wrote: I would add one other point: Try to be 'future-proof'. Are you 100% sure that you will never merge both sets of users? 'Never' is a long time ... (Remember that you will have to solve UID/GID/naming conflicts during the merge. It will be painful.) What is

Re: [Freeipa-users] Recomendations on multi-domain environments

2013-09-20 Thread Dmitri Pal
On 09/18/2013 07:55 AM, Andrew Lau wrote: On Wed, Sep 18, 2013 at 9:40 PM, Arturo Borrero aborr...@cica.es mailto:aborr...@cica.es wrote: Hi there! This is my situation. I have some users of my main domain cica.es http://cica.es. But I also maintain a database of users

[Freeipa-users] Recomendations on multi-domain environments

2013-09-18 Thread Arturo Borrero
Hi there! This is my situation. I have some users of my main domain cica.es. But I also maintain a database of users of others domain, ie example.es. I can apply most of FreeIPA configuration to cica.es users: access to hosts, groups, policies, roles, etc.. But users of example.es are

Re: [Freeipa-users] Recomendations on multi-domain environments

2013-09-18 Thread Andrew Lau
On Wed, Sep 18, 2013 at 9:40 PM, Arturo Borrero aborr...@cica.es wrote: Hi there! This is my situation. I have some users of my main domain cica.es. But I also maintain a database of users of others domain, ie example.es. I can apply most of FreeIPA configuration to cica.es users: access