[Freeipa-users] Adding cross realm trust principals

[Dmitri Pal]

On 07/21/2014 04:10 AM, Alexander Bokovoy wrote:
> On Mon, 21 Jul 2014, Petr Spacek wrote:
>> On 21.7.2014 09:30, Alexander Bokovoy wrote:
>>> On Mon, 21 Jul 2014, Andreas Ladanyi wrote:
>>>> Hello,
>>>>
>>>> i want to migrate an existing MIT Kerberos Realm to IPA and want to 
>>>> setup a
>>>> cross realm trust relationship. I exactly have the problem 
>>>> discussed on this
>>>> Mailinglist
>>>> https://www.redhat.com/archives/freeipa-users/2013-November/msg00213.html 
>>>>
>>>> and want to ask if there is now a new way to create trust 
>>>> principals without
>>>> using "kadmin.local -x ipa-setup-override-restrictions".
>>> No changes yet.
>>
>> Let me elaborate. We haven't had time to work on this but it would be 
>> really valuable if you could experiment with it a little bit.
>>
>> Simo, Alexander, could you propose some dirty tricks to try?
> The thread mentioned above has all needed information already.
Should we turn it into a HOWTO page then?

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.