[Freeipa-users] allow trust users to login without domain

[Jakub Hrozek]

On Wed, Apr 29, 2015 at 10:57:45AM +0000, Andy Thompson wrote:
> In the environment I'm working on currently we have a single trusted AD domain and will never have any additional domain trusts in place.  Is there a way to allow users to login without using @ad_domain in their username?  We use DB2 in the environment and it's from the dark ages and doesn't like usernames with more than 8 chars :/
> 
> Thanks
> 
> -andy

(I was searching for a different thread and found out that this message
was left unanswered. Sorry about that!)

default_domain_suffix is what you're looking for.