On to, 17 tammi 2019, lejeczek via FreeIPA-users wrote:
On 16/01/2019 21:17, Alexander Bokovoy wrote:
>On ke, 16 tammi 2019, lejeczek via FreeIPA-users wrote:
>>hi guys
>>
>>After a longer break from Windowze, I had Win2012 trust okey in
>>the past, now I'm fiddling with Win2016 and have this question:
>>
>>After trust (one-way coming from AD) established okey should AD's
>>users be immediately available to/in IPA?
>>
>>Usual things such as id, ipa user-show do find them users. I
>>cannot remember how it was with my Win2012.
>There should be no difference in functional behavior.
>
>Perhaps, you were lucky in terms of establishing trust at a time when
>SSSD on IPA master decided to refresh its domain information and
>discovering it has new trusted domains to look at.
>
ough... I was not being careful with my typing, it is:
Usual things such as id, ipa user-show do NOT find them users. I
cannot remember how it was with my Win2012.
ipa user-show should not find any AD
users at all, that's as intended.
if `id user(a)ad.domain` doesn't work, follow SSSD troubleshooting guides
https://docs.pagure.org/sssd.sssd/users/troubleshooting.html
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland