From: "Carlos Raúl Laguna" <carlosla1987@gmail.com>
To: "General discussion list for the 389 Directory server project." <389-users@lists.fedoraproject.org>
Sent: Wednesday, May 27, 2015 1:02:23 PM
Subject: Re: [389-users] 389 ds as main object for storage all users

Hello William,

The problem with that approach is, user will not be in the same place, some users will be in AD other in FreeIPA and the actual need is to use Kolab groupware as email system for all user however kolab have some special attribute that need to be present in all user to work properly. Any ideas. Regards
With IPA trust set up, you can have local IPA users and AD users in the same environment. I'm not 100% sure on the order of operations, but a lookup will be performed against IPA then forwarded on to the trust, or vice versa. But you should be able to have an environment with both users in IPA and users in AD. Here's some information on how to set it up if you're interested in giving it a test: . https://www.freeipa.org/page/Active_Directory_trust_setup 

-- David

2015-05-27 3:09 GMT-04:00 William <william@firstyear.id.au>:
Why not use freeipa's AD trust features?

William

> On 27 May 2015, at 05:42, Carlos Raúl Laguna <carlosla1987@gmail.com> wrote:
>
> Hello everyone,
>
> It would be possible to create a scenario where 389 ds became a box for all users through winsync and replication,We have some users in Windows AD and some other in Freeipa, however we are looking a way to put together all the user in one place 389 DS, (just the users) to create a single email system for all users. Any input will be appreciated. Regards
>
>
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users