<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 09/18/2013 11:42 AM, Михаил А wrote:
<blockquote
cite="mid:CALtTMp+G42qnwHQ1ndgEK7geTo+nDDVrj76Xvntq47Bo3z2Mnw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Hi,</div>
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> Do
I need network access to ports from the ipa-client to the
server-</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> windows
for authentication with windomain accounts?</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> ipa-server
fedora19</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> ipa-client
fedora19</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> winserver
win2012</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> the
ipa-client is located in another network</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> within
the network ipa-server, ipa-client and windows-server</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> authentication
works</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> to
the ipa-client:</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> #id
windomainuser@windomain</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> id:
windomainuser@windomain: No such user</span><br
style="font-family:arial,sans-serif;font-size:12.727272033691406px">
<span
style="font-family:arial,sans-serif;font-size:12.727272033691406px"> please
tell me what I'm doing wrong</span><br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
We need to understand more about your setup.<br>
Are you using trusts?<br>
What is your DNS configuration?<br>
<br>
Generally if you are using trusts than clients should be able to
resolve AD server and connect to it.<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>