Re: [Freeipa-users] Cross Realm Authentication between two FreeIPA Servers

2015-05-05 Thread Martin Kosek
On 05/02/2015 05:03 PM, Alexander Bokovoy wrote:
> - Original Message - 
> 
>> Do we have any plans to implement in future?
> Yes, once we get everything ready for fully working AD trusts support 
> (i.e. IPA users being able to login to Windows machines). The reason for that
> is because we will be re-using the same infrastructure in both cases so
> the code will largely be the same to drive both use cases.
> 
> This is very important because then we don't need to update SSSD on the 
> machines
> where current AD trust feature is already supported -- they will be able to
> operate with IPA-IPA trust the instant moment it is established. Actual 
> process
> of setting up IPA-IPA trust will be a bit different, of course, as we have 
> better
> ways to set the trust up in this case.

BTW, this is the ticket you can use for tracking purposes:

https://fedorahosted.org/freeipa/ticket/4867

Martin

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] Cross Realm Authentication between two FreeIPA Servers

2015-05-02 Thread Alexander Bokovoy
- Original Message - 

> Do we have any plans to implement in future?
Yes, once we get everything ready for fully working AD trusts support 
(i.e. IPA users being able to login to Windows machines). The reason for that
is because we will be re-using the same infrastructure in both cases so
the code will largely be the same to drive both use cases.

This is very important because then we don't need to update SSSD on the machines
where current AD trust feature is already supported -- they will be able to
operate with IPA-IPA trust the instant moment it is established. Actual process
of setting up IPA-IPA trust will be a bit different, of course, as we have 
better
ways to set the trust up in this case.


-- 
/ Alexander Bokovoy

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] Cross Realm Authentication between two FreeIPA Servers

2015-05-02 Thread Shaik M
Do we have any plans to implement in future?

Thanks,
Shaik

On 2 May 2015 at 20:15, Alexander Bokovoy  wrote:

> - Original Message -
>
> > Hi,
>
> > can you please let me know, how to setup Cross Realm Authentication
> between
> > two FreeIPA Servers?
> Not supported yet.
>
> --
> / Alexander Bokovoy
>
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] Cross Realm Authentication between two FreeIPA Servers

2015-05-02 Thread Alexander Bokovoy
- Original Message - 

> Hi,

> can you please let me know, how to setup Cross Realm Authentication between
> two FreeIPA Servers?
Not supported yet.

-- 
/ Alexander Bokovoy

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project