Re: [Freeipa-users] IPA Domain vs. AD

2015-10-16 Thread Petr Spacek
On 15.10.2015 20:39, Ben Francis wrote:
> Hello IPA Warriors,
> 
> Firstly, some love: I installed ipa-server from the Oracle Linux repos and
> it worked right out of the box. Woot! Getting that many packages to play
> nice together is a huge accomplishment.
> 
> However, I uninstalled it because I feared it would cause problems with our
> current Active Directory.
> 
> I'm in a sandbox environment that nevertheless authenticates to AD.
> 
> So... How do I configure the hostname and domain so as not to interfere
> with AD?
> 
> I do want to integrate with AD.
> 
> The current domain setup:
> 
> college.edu
> 
> sandbox.college.edu (real, existing domain name, 'cept for the college part)
> 
> Would the folowing work?
> 
> hostname: sandbox.college.edu
> domain: ipa.college.edu
> 
> ipa.college.edu does not exist in DNS.


That should work, if you actually create the domain ipa.college.edu and
delegate it properly to IPA DNS server or if you fill it in with DNS records.

Please see http://www.freeipa.org/page/Deployment_Recommendations#DNS

-- 
Petr^2 Spacek

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


[Freeipa-users] IPA Domain vs. AD

2015-10-15 Thread Ben Francis
Hello IPA Warriors,

Firstly, some love: I installed ipa-server from the Oracle Linux repos and
it worked right out of the box. Woot! Getting that many packages to play
nice together is a huge accomplishment.

However, I uninstalled it because I feared it would cause problems with our
current Active Directory.

I'm in a sandbox environment that nevertheless authenticates to AD.

So... How do I configure the hostname and domain so as not to interfere
with AD?

I do want to integrate with AD.

The current domain setup:

college.edu

sandbox.college.edu (real, existing domain name, 'cept for the college part)

Would the folowing work?

hostname: sandbox.college.edu
domain: ipa.college.edu

ipa.college.edu does not exist in DNS.

Ben
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project