On 12/17/2013 04:19 PM, J. Alexander Jacocks wrote:
On Tue, Dec 17, 2013 at 4:06 PM, Dmitri Pal <dpal(a)redhat.com
<mailto:dpal@redhat.com>> wrote:
Just FYI, the latest released upstream SSSD 1.11 has the support
of the multiple domains.
Dmitri,
Are you saying that the current version of sssd, in RHEL/clones will
not support the config that I have? If so, what path should I take?
I am not under the impression that SSSD's major version will be
bumped, in RHEL 6.
Thanks!
- Alex
I am just saying that you are trying to emulate multiple AD domains
support with the LDAP back end and kerberos. You might be successful but
it is complex so we created AD provider in version SSSD 1.9 that went
into 6.4. But it did not support multiple domains. Just one. In the
course of versions 1.10 and 1.11 we added ability to support trusted AD
domains in the same forest. This is coming in RHEL7 which is in beta
now. But since you are using RHEL clones you might consider taking
upstream release 1.11.x, building it yourself and trying.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/