Re: [Freeipa-users] Unable to enumerate IPA users from AD side of 2-way trust due to kerberos error

2016-05-17 Thread Alexander Bokovoy
On Tue, 17 May 2016, John Meyers wrote: All, I have established a 2-way forest trust between FreeIPA (4.2.4-1.fc23) and AD (Windows 2012R2). The IPA side works perfect and AD users can authenticate against IPA resources. However, when one tries to add an IPA user or group to a Windows permissi

[Freeipa-users] Unable to enumerate IPA users from AD side of 2-way trust due to kerberos error

2016-05-17 Thread John Meyers
All, I have established a 2-way forest trust between FreeIPA (4.2.4-1.fc23) and AD (Windows 2012R2). The IPA side works perfect and AD users can authenticate against IPA resources. However, when one tries to add an IPA user or group to a Windows permission set (e.g. an NTFS ACL or user right), W