<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>It is in the Web interface, switch to IPA Server tab and look under Trusts menu item.<br></div><div><br></div><div>There you can press on the trust name and will see parameters of it, including Security Identifier of the root domain of the AD forest.<br></div><div><br></div><div>I'm attaching a screenshot from RHEL 7-based IPA server<br></div><div><br></div><div><img src="cid:2c888ac7a377fdf8600c29c6a8d8cb605a8b564e@zimbra" alt=""></div><hr id="zwchr"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><div dir="ltr"><div>Since this information isn't in the Web Interface.</div>How do I find query the ipa ldap server to proof that IPA is talking to our AD server in order to get identity and authorization information.<div><br></div><div>Yes we know we've established a trust for our linux subdomain. But theres nothing that I can find that says it's our ad server.</div><div><br></div></div><br>-- <br>Manage your subscription for the Freeipa-users mailing list:<br>https://www.redhat.com/mailman/listinfo/freeipa-users<br>Go To http://freeipa.org for more info on the project</blockquote><div><br><br></div><div><br></div><div>-- <br></div><div><span name="x"></span>/ Alexander Bokovoy<span name="x"></span><br></div></div></body></html>