Hi Team,
i have a very complex/large AD setup which SSSD successfully integrated the
Linux machine onto it.
now after acquiring another company we have to integrate a separate AD forest
which is now trusted by our forest root.
I understand that SSSD won't work with external trusts and only support the
same forest.
what is the best practice to allow authentication from the new trusted forest.
on my test lab
I added the new forest to a new domain section, then used adcli to create a
computer account on the new forest.
so technically this Linux machine is now joined to two domains
klist -k show correct entries for both forests
nothing i changed in krb5.conf
my tests are positive and i was able to login both forests from my Linux
machine.
is this supported scenario and what is the best practice when having external
trust?.
any detailed guidance will be highly appreciated (no documentation about this
except for IPA which we don't use)
Thanks
_______________________________________________
sssd-users mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/sssd-users
