Hi,
for the entries stored on AD side, the compat tree creates entries on demand, and only when specific search filters are used (the same ones as posix-compliant systems would use) . You can find the list of supported search filters in RFC 2307 (rfc2307#section-5.2).

This means for instance that in order to find the AD user bob@ad.com on the compat tree, your search filter should look like
(&(objectClass=posixAccount)(uid=bob@ad.com))

Once this search filter has been used, the compat tree is populated and the entry can be found.
It implies that if you run id bob@ad.com, the compat tree will also be populated with the entry for bob@ad.com.
Hope this clarifies,
flo

On Mon, Aug 23, 2021 at 9:08 AM iulian roman via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
I have tried with that one already, but unfortunately it does not resolve the trusted AD users.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure