[Freeipa-users] Kerberois FreeIPA Question

[Petr Spacek]

On 3.7.2016 14:19, Günther J. Niederwimmer wrote:
> Hello,
> 
> Is it possible to create a kerberos Ticket for a secondary domain ?
> 
> CentOS 7.2 IPA 4.3.1
> My installing,
> I have a IPAServer for
> 
> Domain
> test.com
> 
> LDAP & Kerberos
> TEST.COM
> 
> now i like to include a other Domain
> new.net
> 
> Is it possible to have for this domain also a kerberos ticket ?
> 
> I found a example in a krb5.conf like this
> [domain_realm]
> .test.com = TEST.COM
> .new.net = TEST.COM
> ...
> 
> is this possible with FreeIPA ?

One FreeIPA instance always represents one Kerberos REALM. At the same time
multiple DNS domains can belong to one FreeIPA REALM. See command 'ipa
realmdomains'.


-- 
Petr^2 Spacek