On 12/17/2013 04:19 PM, J. Alexander Jacocks wrote:
On Tue, Dec 17, 2013 at 4:06 PM, Dmitri Pal <dpal@redhat.com> wrote:
Just FYI, the latest released upstream SSSD 1.11 has the support of the multiple domains.

Dmitri,

Are you saying that the current version of sssd, in RHEL/clones will not support the config that I have?  If so, what path should I take?  I am not under the impression that SSSD's major version will be bumped, in RHEL 6.

Thanks!
- Alex 
I am just saying that you are trying to emulate multiple AD domains support with the LDAP back end and kerberos. You might be successful but it is complex so we created AD provider in version SSSD 1.9 that went into 6.4. But it did not support multiple domains. Just one. In the course of versions 1.10 and 1.11 we added ability to support trusted AD domains in the same forest. This is coming in RHEL7 which is in beta now. But since you are using RHEL clones you might consider taking upstream release 1.11.x, building it yourself and trying.

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/