[Freeipa-users] samba4 AD functionality with freeipa in the core?

[Simo Sorce]

On Wed, 2014-07-09 at 12:02 +0200, Iván Szántó wrote:
> Hi,
> 
> I know this is the freeipa list and not the samba list, but you may have
> some information about this subject.
> 
> I would like to know if there is some (active) development going on from
> the freeipa side to enable it to be integrated in the core of samba4 so as
> to provide AD functionality.
> 
> Please let me know or redirect me to other lists if necessary

We attempted to do something in this area (sort of AD personality) a few
years ago, but it just doesn't work.

What we did instead is to allow creating cross realm trusts between a
FreeIPA domain and an AD domain. Unfortunately Samba 4 AD still does not
support forest trusts so we are limited to interoperate only with
Windows AD for now. Once Samba 4 AD will support forest trusts then
you'll be able to use FreeIPA for your linux/unix machines and Samba 4
for your Windows machines.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York