[Freeipa-users] Trust between IPA and another MIT Kerberos Realm

[Matt Bryant]

All,

Is there any documentation anywhere that describes whether this can be 
done and how to do it ?? Would like to set up a one way trust between a 
new IPA realm and a legacy kerberos realm. The doco explicitly says dont 
use kadmin/kadmin.local so not sure how to get the 
krbtgt/OLD_REALM at IPA-REALM principle into IPA that would facilitate such 
a trust.

rgds

Matt B.