Re: [Freeipa-users] multimaster ad one way trust setup

2016-01-25 Thread Rob Verduijn
Cool Thanx Rob Verduijn 2016-01-25 12:59 GMT+01:00 Alexander Bokovoy : > On Mon, 25 Jan 2016, Rob Verduijn wrote: >> >> Since the first option has less impact, that one sounds the most >> interesting. >> However, does this also remain functional when the first ipa server is >> taken offline ? > >

Re: [Freeipa-users] multimaster ad one way trust setup

2016-01-25 Thread Alexander Bokovoy
On Mon, 25 Jan 2016, Rob Verduijn wrote: Since the first option has less impact, that one sounds the most interesting. However, does this also remain functional when the first ipa server is taken offline ? Yes. What this option enables is to allow IPA master to become 'trust agent' which means S

Re: [Freeipa-users] multimaster ad one way trust setup

2016-01-25 Thread Rob Verduijn
Since the first option has less impact, that one sounds the most interesting. However, does this also remain functional when the first ipa server is taken offline ? Rob Verduijn 2016-01-25 12:41 GMT+01:00 Alexander Bokovoy : > On Mon, 25 Jan 2016, Rob Verduijn wrote: >> >> Hi all, >> >> When you

Re: [Freeipa-users] multimaster ad one way trust setup

2016-01-25 Thread Alexander Bokovoy
On Mon, 25 Jan 2016, Rob Verduijn wrote: Hi all, When you have an ipa 4.2 server with an one way trust to the ad. What steps are needed to install a second ipa master that also has a one way trust to the ad ? Depends on what you want to achieve. If you want second IPA master to be able to reso