Re: [Freeipa-users] Can an Active Directory domain be the default domain?

2015-04-13 Thread Jakub Hrozek
On Mon, Apr 13, 2015 at 01:02:18PM -0400, David Guertin wrote: Said that, you can set default domain in SSSD configuration on the legacy clients (RHEL 5) as then SSSD will ensure proper fully-qualified name will be sent towards compat tree and non-qualified name can be asked on the client

Re: [Freeipa-users] Can an Active Directory domain be the default domain?

2015-04-13 Thread Jakub Hrozek
On Mon, Apr 13, 2015 at 10:23:08AM -0400, David Guertin wrote: In our newly-setup IPA environment, users can log in to RHEL clients with the username username@addomain. This works, but I've run into a problem with some RHEL 5 clients that are Apache servers -- the Apache UserDir mappings no

Re: [Freeipa-users] Can an Active Directory domain be the default domain?

2015-04-13 Thread Alexander Bokovoy
On Mon, 13 Apr 2015, David Guertin wrote: In our newly-setup IPA environment, users can log in to RHEL clients with the username username@addomain. This works, but I've run into a problem with some RHEL 5 clients that are Apache servers -- the Apache UserDir mappings no longer work. Many of

Re: [Freeipa-users] Can an Active Directory domain be the default domain?

2015-04-13 Thread David Guertin
Said that, you can set default domain in SSSD configuration on the legacy clients (RHEL 5) as then SSSD will ensure proper fully-qualified name will be sent towards compat tree and non-qualified name can be asked on the client (RHEL 5) side. I was able to do this on RHEL 6/sssd 1.11 with