[Freeipa-users] Trust between freeipa servers of different domains

[ivan lago]

Hello,

Is it possible to configure 2 freeipa servers, serving different domains (let’s 
sal dom1.com  and dom2.com ) to estabilish 
a trust so that users form one domain can use resources under the control of 
the other one?
And if it is possible, would it be doable to estabilish cross-servers user 
groups, with users from both the servers?

Initially I would be in control of both of servers, so I would be able to do 
any needed “hack” on the configuration.

Thanks,

Ivan-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Trust between freeipa servers of different domains

[Martin Babinsky]

On 02/03/2017 03:49 PM, ivan lago wrote:

Hello,

Is it possible to configure 2 freeipa servers, serving different domains
(let’s sal dom1.com  and dom2.com ) to
estabilish a trust so that users form one domain can use resources under
the control of the other one?
And if it is possible, would it be doable to estabilish cross-servers
user groups, with users from both the servers?

Initially I would be in control of both of servers, so I would be able
to do any needed “hack” on the configuration.

Thanks,

Ivan




Hi Ivan,

there is no IPA-IPA trust functionality implemented. It is on the 
roadmap but the work on the feature won't start anytime soon.


--
Martin^3 Babinsky

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project