Ben Aveling via FreeIPA-users wrote:
I only have limited access to the IPA server.
Using the cli, I've found that if I use the fully qualified domain name, it returns
"Access granted: True".
But if I use only the bare hostname, it returns "Access granted: False".
This is expected. There is no way to know what domain a shortname comes
from. A FQDN is required. It's what sssd uses as well.
rob