On su, 03 loka 2021, Jakub Novak via FreeIPA-users wrote:
Hi.
Is possible set Outbound one-way only trust?
Currently I can set only bidirectional or Inbound one way.
What is a use case? Right now FreeIPA does not provide any means for AD
DCs to resolve users and groups in IPA so outbound trust is useless for
the purpose of being able to login to resources in a trusting forest.
Existing two-way trust support is mostly to allow S4U extensions to
work across the trust for users from a trusted forest because that is
required for applications like SQL Server running on an IPA client.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland