On 11/19/2015 05:57 PM, Petr Cech wrote:
On 11/12/2015 06:04 PM, Jakub Hrozek wrote:
> On Thu, Nov 12, 2015 at 04:54:21PM +0100, Petr Cech wrote:
>> >On 11/11/2015 02:42 PM, Jakub Hrozek wrote:
>>> > >Hi, I think it's a good idea to only say we don't handle
services
>>> for
>>> > >IPA subdomains. But I also think it would be better to shortcut the
>>> > >request sooner, in ipa_subdomain_account_send() to avoid even
>>> sending an
>>> > >LDAP query.
>> >Hi Jakub,
>> >
>> >new patch is attached. During the testing... I found out, that I use
>> wrong
>> >set up. Subdomains are connected to FreeIPA with trusted AD.
> What's wrong about it? I think we/should/ test this setup..
Hi Jakub,
I was confused about it. I haven't got such environment with IP trust.
But now I have one.
>
>> >
>> >So... patch is here, but I would like set up my environment properly
>> and
>> >then I will inform you:-)
>> >
>> >Regards
>> >
>> >Petr
But I still do something wrong. I set up environment:
AD server: dom-78.abc...
FreeIPA server: mirfak.persei.dev
FreeIPA client: algol.persei.dev
I set up the trust between IPA and AD. And then I tried on ipa clinet:
# getent services ldap/mirfak.persei.dev(a)PERSEI.DEV
The result of 'tail -f *.log' in /var/log/sssd is attached.
Please, does anybody know what I do wrong?
Petr
PS: <astronomy>Mirfak is the brightest star in Perseus and Algol is the
second one.</astronomy>
bump