[Freeipa-users] login problem after set trust

Alexander Bokovoy abokovoy at redhat.com
Thu Feb 21 18:33:35 UTC 2013


On Thu, 21 Feb 2013, Andre Rodrigues wrote:
>Hi all,
>
>I'm testing trust Freeipa-AD follow the "how to"
>http://www.freeipa.org/page/Howto/IPAv3_AD_trust_setup
>
>After set ipa trust-add users from AD domain can logon on ipa domain
>using ssh (ssh -l user at AD.DOMAIN linux.ipa), but FreeIPA users can't
>logon on Windows machine (winserver 2008) (using IPA.DOMAIN\user or
>user at IPA.DOMAIN as username):
>“The name or security ID (SID) of the domain specified is inconsistent
>with the trust information for that domain”
>
>Sometimes another error appears:
>“There are no logon servers available to service the logon request”
>
>Both errors seems to be from samba4, but I don't find a solution yet.
>Some users reported that after update samba this problem was solved,
>but my samba is updated.
>
>Someone has gone through this error or can help me?
Yes, this is expected because we have not yet finished this part of the
puzzle. Currently only IPA resources are available to Windows users, not
vice versa.

There is still work in progress slated for Fedora 19.

-- 
/ Alexander Bokovoy




More information about the Freeipa-users mailing list