[Freeipa-users] [[Test-Announce] Fedora 22 Final status is Go, release on May 26, 2015]

[Carlos Raúl Laguna]

Just for clarification,
If i create a user in Windows 2008R2 it propagates to Freeipa 4.1 because
freeIPA trust the AD domain, in this  scenario where AD equally trust the
freeIPA domain (Fedora 22), a user created in freeIPA should not propagate
as well to AD ? Regards


2015-05-22 16:39 GMT-04:00 Alexander Bokovoy <abokovoy at redhat.com>:

> On Fri, 22 May 2015, Carlos Raúl Laguna wrote:
>
>> Hi Alexander
>> Great news, does this also mean that user created in freeipa are self
>> created/synchronized in the windows ad ? Regtards
>>
> With cross-forest trust we don't synchronize anything to AD. Think about
> it as if FreeIPA was a separate AD forest, two AD forests don't
> synchronize anything to each other, they _refer_ to each other's domain
> controllers for operations that require authentication or other changes.
>
> --
> / Alexander Bokovoy
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150522/f867481c/attachment.htm>