On 14/11/2019 10:56, lejeczek via FreeIPA-users wrote:
hi guys
I've have AD trust work fine (gssapi), ssh & samba are password-less
when the trust is establish with 'admin' credentials.
But the strory is very different with 'shared secret'. Kerberos does not
work, passwords are asked for and with Windows cifs - asks for username
and no authentication even with passwords!
And this weird bit, I do:
$ ipa trust-add --all --two-way=0 --type=ad bec.private.mac.ac.uk
--trust-secret --server=win8-vm.bec.private.mac.ac.uk
Shared secret for the trust:
...
Here, for the 'secret' I can punch in anything and IPA will say that the
trust was added successfully - this surely must not be right, right?
So, should 'secret' work for one-way incoming trust in IPA? To me, it
does not seem like.
many thanks, L.
I think it's okey (and the highest time) to say that IPA does not give a
working one-way-trust-secret trust with AD. (so folks would not waste
time trying)
Maybe in labs for @devel it does work but what's rpm packaged in common
distros for 'regular' folk world, that is broken.
Anybody not 'devel' got such trust work?
many thanks, L.