<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 11/20/2014 07:38 PM, William
Muriithi wrote:<br>
</div>
<blockquote cite="mid:20141121003834.6037651.22833.8974@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<style> body { font-family: "Calibri","Slate Pro","sans-serif"; color:#262626 }</style>
<div>Hi guys,</div>
<div><br>
</div>
<div>I am wondering how one would go about allowing both ad users
and FreeIPA user to work in harmony. </div>
<div><br>
</div>
<div>I recently was able to get FreeIPA to use trust to service
unix systems. However, I encountered resistance as some people
didn't like the long username, for example,
<a class="moz-txt-link-abbreviated" href="mailto:username@domain.local@dev1.example.com">username@domain.local@dev1.example.com</a>. So I created local
accounts and forced everyone back to FreeIPA users.</div>
<div><br>
</div>
<div>Some people didn't mind the name format and would prefer a
single username everywhere. So now things are a bit cool, am
investigating if these accounts can coexist and would like it to
be up to the user's which account the will use</div>
<div><br>
</div>
<div>When I check id when logged in on with ad account, I don't <span
style="font-family: Calibri, 'Slate Pro', sans-serif;"> see
the group developer, but see <a class="moz-txt-link-abbreviated" href="mailto:developers@example.local">developers@example.local</a>. This is
a problem since I can't assign files to two groups, something
I need as they have files they all have change. I also need
both users to have SUDO access, this is fine as I can just
duplicate SUDO commands one for developers group and another
for <a class="moz-txt-link-abbreviated" href="mailto:developers@example.local">developers@example.local</a></span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;"><br>
</span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;"><br>
</span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;">How
would one fix file sharing between ad and FreeIPA users? </span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;"><br>
</span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;">I
don't think one can put a group within another group? Or am I
wrong on that? Google results seem negative </span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;"><br>
</span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;">Thanks
for advice</span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;"><br>
</span></div>
<div><span style="font-family: Calibri, 'Slate Pro', sans-serif;">William
</span></div>
<div><br name="BB10" caretmarkerset="INVALID"
class="markedForCaretMarkerRemoval">
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
Check this
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/V4/Migrating_existing_environments_to_Trust">http://www.freeipa.org/page/V4/Migrating_existing_environments_to_Trust</a><br>
I think you might want to consider views and override names there.<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>