[Freeipa-users] AD trust relationship is established, but IPA cannot see AD users

[Simo Sorce]

On Tue, 2015-03-03 at 17:40 +0000, Guertin, David S. wrote:
> > yes, I'm quite certain this is the client.
> 
> Actually, it isn't, or at least it's not supposed to be. I've only ever installed IPA on one machine, and the command I used to install it was ipa-server-install (followed by ipa dnsconfig-mod, ipa-adtrust-install, and ipa trust-add, as described in the documentation).
> 
> Of course, the ipa-client package is installed too, but if this machine is not acting as a server then something is seriously messed up!
> 
> David Guertin
> 

An IPA server is always also a client of itself.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York