<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Is it possible to setup a Master level FreeIPA domain, then have 3 sub level domains use it for authentication? <div class=""><br class=""></div><div class="">So master server at say <a href="http://ipa.domain.com" class="">ipa.domain.com</a>, then have a secondary zone that is <a href="http://ipa2.sub1.domain.com" class="">ipa2.sub1.domain.com</a>.</div><div class=""><br class=""></div><div class="">We have 3 different environments that need to stay separated. We were going to have them all authenticate to an Active Directory domain but getting that setup is turning into a real issue. So if possible I would like to have a master level IPA server, then three sub level IPA servers that authenticate against it, then have our Windows Terminal Servers authenticate against it as well if possible.</div><div class=""><br class=""></div><div class="">So if there is documentation on how to set that up I would appreciate a pointer, I haven’t been able to find it yet.</div><div class=""><br class=""></div><div class="">Thanks much!<br class=""><div class=""></div></div><div apple-content-edited="true" class=""> <span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px;"><div class=""><br class="Apple-interchange-newline">Regards,</div><div class="">------------------------------------------</div><div class="">Aric Wilisch</div><div class=""><a href="mailto:awilisch@gmail.com" class="">awilisch@gmail.com</a></div><div class=""><br class=""></div></span><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"> </div> <br class=""></body></html>