On 16/01/2019 21:17, Alexander Bokovoy wrote:
On ke, 16 tammi 2019, lejeczek via FreeIPA-users wrote:
> hi guys
>
> After a longer break from Windowze, I had Win2012 trust okey in the
> past, now I'm fiddling with Win2016 and have this question:
>
> After trust (one-way coming from AD) established okey should AD's
> users be immediately available to/in IPA?
>
> Usual things such as id, ipa user-show do find them users. I cannot
> remember how it was with my Win2012.
There should be no difference in functional behavior.
Perhaps, you were lucky in terms of establishing trust at a time when
SSSD on IPA master decided to refresh its domain information and
discovering it has new trusted domains to look at.
ough... I was not being careful with my typing, it is:
Usual things such as id, ipa user-show do NOT find them users. I cannot
remember how it was with my Win2012.