Hi List,
I am using sssd-1.13 to authenticate my linux clients against Active Directory.
Got this working too.
Now we have an incoming one way trust from another domain.
So here is the scenario:
AD1:
dom1.com - One-way incoming trust from AD2.
AD2:
dom2.com - One-way outgoing trust to AD1.
LinuxClient1: member of
AD1/dom1.com
Can lookup User1(Created in AD1/DOM1): Linux1>$id AD1\User1 - OK
Can't lookup User2(Created in AD2/DOM2) Linux1>$id AD2\User2 - Not OK.
SSSD is configured with AD1 domain.
Is this kind of configuration possible with SSSD and sssd-ad provider because i am able
to achieve the above using likewise but not sssd.
Please show some light on this.
Not supported at the moment short of joining the client to the two
forests and defining two [domain] sections.
It's planned but we're not there yet: