[Freeipa-users] AD - Freeipa trust confusion

[Andrew Holway]

> You are still setting up a replication agreement not a trust.

Oh, I am following the redhat documentation here:

https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/managing-sync-agmt.html

> This seems to indicate that the directory server is not running.
> Can you check that the dirsrv is running?

[root at ipa.wibble.com log]# /etc/init.d/dirsrv status
dirsrv PKI-IPA (pid 7394) is running...
dirsrv WIBBLE-COM (pid 7463) is running...


[root at ipa.wibble.com log]# ipa trust-add --type=ad prattle.com --admin
Administrator --password
Active directory domain administrator's password:
----------------------------------------------------
Added Active Directory trust for realm "prattle.com"
----------------------------------------------------
  Realm name: prattle.com
  Domain NetBIOS name: PRATTLE
  Domain Security Identifier: S-1-5-21-2812083513-4116408788-3699662436
  Trust direction: Two-way trust
  Trust type: Active Directory domain
  Trust status: Established and verified

However I cannot log into the windows domain with my linux users nor
the linux domain with my linux users.....

Ta,

Andrew