Hi, The document looks fine. Would be nice if it had some link on a HOWTO page about generation of a user certificate to use for AD-originated users. Apart from that - everything is pretty clear -- Oleg Fayans Quality Engineer FreeIPA team RedHat.