Hi!
I'm experiencing something that I'm not sure is as expected or not.
First some data: OS: Ubuntu 16.04 SSSD Version: 1.13.4
I have managed to set up a SSSD against a AD-subdomain. NSS-lookup works. Can use 'userid', 'userid@subdomain1.domain.tld' and UPN when looking up an ID.
I have set up a auto_home hierarchy in AD on subdomain1.domain.tld and managed to get AutoFS to work using this and get a working homedirectory using autofs and NFS.
When I do this with a user in an another subdomain in the forest (subdomain2.domain.tld) I get into trouble. ID-lookup works like a charm. I have also set up a auto_home-hierarchy in this other subdomain.
When looking in the logs is looks like the implementation of autofs only uses the domain the SSSD is connected to. Not a single mention in the logs about the other subdomain regarding to autofs.
Is it correct to assume that autofs in multiple domains in a forest doesn't work or am I doing something wrong?
My sssd.conf looks like this. (some names have been changed to protect the innocent)
[domain/subdomain1.domain.tld] access_provider = ad ad_domain = subdomain1.domain.tld ad_hostname = client1.subdomain1.domain.tld autofs_provider = ad cache_credentials = True debug_level = 8 default_shell = /bin/bash fallback_homedir = /userhome/%u id_provider = ad krb5_realm = SUBDOMAIN1.DOMAIN.TLD krb5_store_password_if_offline = True ldap_id_mapping = False mkhomedir = false realmd_tags = manages-system joined-with-adcli
[sssd] config_file_version = 2 domains = subdomain1.domain.tld services = nss,pam,autofs