On Wed, 03 Jul 2013, Arthur wrote:
28.06.2013 18:57, Simo Sorce пишет:
On Fri, 2013-06-28 at 14:09 +0800, Mail Robot wrote:
Hi everyone,
I am new to this mailing list.
At the moment I would like to migrate all of my users from Microsoft
Active Directory to Open Source, and what I have in mind is getting it
into Samba 4.
In extending the functionality of it, I decided to intergrate FreeIPA
as the backend to Samba 4.
I saw some obsolete reference on how to use FreeIPA as Samba 4
backend, but I don't know where are the new reference.
Herewith I would seek advise on how to go for my mission.
Sorry to foil your plans but FreIPa cannot be used as an LDAP backend to
Samba4.
We abandoned that path a few years ago as it became clear it was highly
unlikely it would work.
What we've done is that we change our integratioj strategy and
introduced cross-realm trusts that would with Active Directory. In the
future this should work also with Samba4, but Samba4 code base currently
lacks support for cross-forest trusts.
Simo.
Does it mean, that I can not make cross-realm trust between
IPA-server & Samba4-server at this time?
No, you cannot achieve cross-realm trust with Samba AD DC right now.
--
/ Alexander Bokovoy
_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users
