[Freeipa-users] need info on AD / IPA coexistence

[Simo Sorce]

On Wed, 2012-03-07 at 13:38 -0500, Sylvain Angers wrote:
> 
> Hello All,
> We are facing the same difficulties here with coexistence with
> Microsoft AD
> on the same network
> 
> Whenever I run ipa-client-install
> 
> # ipa-client-install --server=server.abcd.ca --domain=abcd.ca
> --realm=UNIX
> DNS domain 'unix' is not configured for automatic KDC address lookup.
> KDC address will be set to fixed value.
> 
> Discovery was successful!
> Hostname: client.abcd.ca
> Realm: UNIX
> DNS Domain: abcd.ca
> IPA Server: server.abcd.ca
> BaseDN: dc=unix
> 
> 
is abcd.ca your windows domain ?

although we support specifying a realm that is not identical to the DNS
domain I strongly suggest you do not do so if you do not want to
experience some trouble and to assing to your UNIX domain it's own DNS
domain that matches the realm. If you do not do that things can still
work, but not w/o some minor annoyances.
For example discovery will fail as you find out because the DNS domain
is owned by the AD realm. You also have to make sure you properly map
realms to domains correctly in various clients.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York