[Freeipa-users] FreeIPA in a locked down Active Directory environment

[Brian Wheeler]

OOps, forgot to reply to list last time.

On 06/19/2012 10:42 AM, Simo Sorce wrote:
> On Tue, 2012-06-19 at 09:14 -0400, Brian Wheeler wrote:
>> I will look into that.  I've got nearly a year before I have to do my
>> machine migrations, so one would assume that this feature would
>> stabilize by the time I get around to doing an actual implementation.
>> I'll play with it and see if I can make it work. Although, the
>> instructions do mention validating it from the windows side of things
>> which may stop me dead in the water since I have no access.
> you need the windows domain credentials to set up the trust, so you
> definitely need collaboration from the windows domain admins.
>
> w/o that collaboration there isn't much you can really do in any case.

I've got rights to join machines to the domain, would that be sufficient?

> Simo.
>