On 12/17/2013 04:19 PM, J. Alexander Jacocks wrote:
I am just saying that you are trying to emulate multiple AD domains
support with the LDAP back end and kerberos. You might be successful
but it is complex so we created AD provider in version SSSD 1.9 that
went into 6.4. But it did not support multiple domains. Just one. In
the course of versions 1.10 and 1.11 we added ability to support
trusted AD domains in the same forest. This is coming in RHEL7 which
is in beta now. But since you are using RHEL clones you might
consider taking upstream release 1.11.x, building it yourself and
trying.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/