My question is, can i make the other way around? I wan't to map the Freeipa Group (Admin) as admin over the Active Directory. Can i?
I've already setup an transient two-way trust between both, authentication works nice for freeipa users over AD. I just want to setup admin users for the windows workstations.