"Trusted AD Domain". That's dubious line at best :-)

I've not seen AIX use AD for user auth but I know AD will work for  Linux systems.

HOWEVER - The AD admins must add the Linux domain as trusted so it can exchange the encrypted data stream. Alternatively, there's a way to do this without the Linux system having trust in the AD realm. Something to do with not usng TLS. 
The RHEL docs on user auth are pretty good for this.

You could try to set up a FreeIPA instance that is in the AD realm and provides auth for AIX. Not sure if AIX has a sssd-ipa package or not. SLES has sssd-ipa but doen't have freeipa server so server runs on RHEL.

On Mon, Feb 14, 2022, 1:54 AM Ronald Wimmer via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
I was wondering if one can configure AIX in a way that trusted AD domain
users can be used to log in under AIX. We followed
https://www.freeipa.org/page/ConfiguringUnixClients but this guide seems
to be LDAP-only and AD users do not have a represenntation in FreeIPA's
LDAP directory.

Could someone please clarify if AD users could work or not?

Cheers,
Ronald
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure