<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 03/03/2015 02:24 PM, Erinn Looney-Triggs wrote: </div> <blockquote cite="mid:2227766.prxMHhFYh6@scrapy.abaqis.com" type="cite"> <pre wrap="">Before I go charging down this path too far, I wanted to figure out whether it is possible for a RHEL 7 system to be a member of both an IPA domain and a separate AD domain? At this point trusts are not established between IPA and the AD, this will happen around the 7.1 release, however, I would like the system to use IPA for auth of things like ssh and the AD domain for auth of CIFS/SMB shares via samba 4. Is this possible? Anyone know? Seems like it should be.</pre> </blockquote> It might be possible with some configuration hacks but we have not done them so it is not known. I suspect that the challenge will be making sure that SSSD and winbind do not step on each other regarding users. 7.1 will allow you to do what you want via trust so it would be safer to wait a bit for it than to try to hack something with questionable probability of success. <blockquote cite="mid:2227766.prxMHhFYh6@scrapy.abaqis.com" type="cite"> <pre wrap=""> -Erinn </pre> <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> <pre class="moz-signature" cols="72">-- Thank you, Dmitri Pal Sr. Engineering Manager IdM portfolio Red Hat, Inc.</pre> </body> </html>