<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 16/12/2016 10:19, Alexander Bokovoy wrote: </div> <blockquote cite="mid:20161216101900.ldzxzicneih7sgvj@redhat.com" type="cite"> <blockquote type="cite" style="color: #000000;">I want to allow users in the AD.EXAMPLE.COM realm to login to machines in the IPA.EXAMPLE.COM realm. Will this still work when the machines are in different DNS domains? </blockquote> Yes, it will. Here is the catch: you need to make sure these different DNS domains all mentioned in 'ipa realmdomains-show' and if not, they should be added by use of 'ipa realmdomains-mod'. None of these domains must overlap with Active Directory domains, of course. </blockquote> Fantastic answer. Thank you so much for taking the time to explain this. Regards, Brian. </body> </html>