<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 12/12/2014 12:36 AM, Eldo Joseph wrote:<br> </div> <blockquote cite="mid:SNT147-W566C135C7D901E47461DCCF600@phx.gbl" type="cite"> <style></style> <div dir="ltr">Hi All, <div><br> </div> <div>I have requirement to access the service under different IPA servers, can some one help me on this... </div> <div><br> </div> <div>IPA Servers are running on V3. </div> <div><br> </div> <div>-Eldo- </div> </div> <br> <fieldset class="mimeAttachmentHeader"></fieldset> <br> </blockquote> Are you saying that you have different IPA domains that are not connected and you need to be able to log into a host from different domains?<br> <br> If so you need:<br> a) Decide which domain is the primary domain for the host.<br> b) Join the host to the second domain<br> c) Manually configure the second authentication domain in sssd.<br> I am not sure whether the IPA back end would work. It might be worth a try.<br> If you configure the second back end as LDAP or LDAP + Kerberos it should be fine.<br> Ask on SSSD list for more help if needed. <br> <br> You need to make sure that your:<br> - UIDs do not overlap between domains<br> - you use FQDN for users when login<br> <br> <br> <pre class="moz-signature" cols="72">-- Thank you, Dmitri Pal Sr. Engineering Manager IdM portfolio Red Hat, Inc.</pre> </body> </html>