On 06/29/2017 09:47 PM, Jason Hensley via FreeIPA-users wrote:
Hello,
I have setup a pair of FreeIPA 4.5.2 servers. One via
ipa-server-install, the other via ipa-replica-install. I have tried
them both as trust controllers and I have tried them in a
controller/agent setup.
My problem is t
The clocks are in sync and yes, I can kinit successfully on the replica as
an AD user@AD domain.
One thing I noticed in the Web UI as admin user, browsing to Identity ->
Groups -> ad_external_group -> External, on the primary IPA server, I see:
ad_user@ad_domain
but on the replica, instead of th