[Freeipa-users] IPA Domain vs. AD

[Petr Spacek]

On 15.10.2015 20:39, Ben Francis wrote:
> Hello IPA Warriors,
> 
> Firstly, some love: I installed ipa-server from the Oracle Linux repos and
> it worked right out of the box. Woot! Getting that many packages to play
> nice together is a huge accomplishment.
> 
> However, I uninstalled it because I feared it would cause problems with our
> current Active Directory.
> 
> I'm in a sandbox environment that nevertheless authenticates to AD.
> 
> So... How do I configure the hostname and domain so as not to interfere
> with AD?
> 
> I do want to integrate with AD.
> 
> The current domain setup:
> 
> college.edu
> 
> sandbox.college.edu (real, existing domain name, 'cept for the college part)
> 
> Would the folowing work?
> 
> hostname: sandbox.college.edu
> domain: ipa.college.edu
> 
> ipa.college.edu does not exist in DNS.


That should work, if you actually create the domain ipa.college.edu and
delegate it properly to IPA DNS server or if you fill it in with DNS records.

Please see http://www.freeipa.org/page/Deployment_Recommendations#DNS

-- 
Petr^2 Spacek