<html dir="ltr"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" id="owaParaStyle"></style> </head> <body fpstyle="1" ocsi="0"> <div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi all<br> <div><br> <font face="Calibri">I'm planning implementing a IPA server at a site where there is allready a working Active directory domain.</font></div> <div><span style="font-family: Calibri; font-size: 10pt;">I would still like the machines from AD and IPA live in the same DNS domain.</span></div> <div><font face="Calibri"><br> </font></div> <div><font face="Calibri">Example.</font></div> <div><font face="Calibri">AD Domainname = foo.bar</font></div> <div><font face="Calibri">AD KERBEROS realm = FOO.BAR</font></div> <div><font face="Calibri">a Host principal would look like: host/host1.foo.bar@FOO.BAR</font></div> <div><font face="Calibri"><br> </font></div> <div><font face="Calibri">Now i would like to introduce the IPA server under a different realm name but for the same DNS name.</font></div> <div><font face="Calibri"><br> </font></div> <div><font face="Calibri">IPA domainname = foo.bar</font></div> <div><font face="Calibri">IPA KERBEROS realm = LINUX.FOO.BAR (or what ever)</font></div> <div><span style="font-family: Calibri;">a Host principal would look like: host/host2.foo.bar@LINUX.FOO.BAR</span></div> <div><span style="font-family: Calibri;"><br> </span></div> <div><span style="font-family: Calibri;">So basicly i would register the hostnames / PTR records in the microsoft DNS and use the IPA kerberos REALM for authentication.</span></div> <div><span style="font-family: Calibri;"><br> </span></div> <div><span style="font-family: Calibri;">Am i making any sense? is this asking for a world of hurt?</span></div> <div><span style="font-family: Calibri;"><br> </span></div> <div><br> </div> <div><br> </div> <div><br> </div> </div> </body> </html>