On Срд, 14 лют 2024, Farshad Allahdadi via FreeIPA-users wrote:
Hi,
I'm going to transfer data between two Hadoop clusters kerberizd/joined
to separate freeIPAs using distcp. The distcp command or any tool
requires to authenticate to both freeIPAs (grant permission to read
from one server and write to other).
My priority is to make the least possible changes to source
cluster/freeIPA which is in production, so I tried to setup trusted
real between these but failed, it seems that trusted realm is only
possible (or documented) between AD and freeIPA. Is it possible to
setup trusted Realm between two freeIPAs(and if yes how to)? What are
the other options to do the job with less impact on source freeIPA?
Also making freeIPAs to be replica for each other is not a good option
for me, because i need to separate them later.
IPA-IPA trust is currently not supported.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland