[Freeipa-users] FreeIPA and samba 4

[Petr Spacek]

On 10.3.2016 16:06, Rob Verduijn wrote:
> Howdy,
> 
> out of curiousity .... any targetted release for UPN ?

Currently 4.4, see https://fedorahosted.org/freeipa/ticket/5354 .

This might change, of course.

Petr^2 Spacek

> 
> Cheers
> Rob
> 
> 2016-03-10 15:15 GMT+01:00 Petr Spacek <pspacek at redhat.com>:
>> On 10.3.2016 13:34, Giulio Casella wrote:
>>> I've seen that howto, but it's not my case. I cannot establish a trust between
>>> IPA and AD, because AD domain involves additional UPNs (mydomain.com and
>>> another.mydomain.com) in addition to main domain foobar.local. This scenario
>>> is not supported by current version of FreeIPA (maybe in future releases).
>>> So: FreeIPA domain and AD domain have to be different.
>>
>> For the record, UPN support is soonish.
>>
>> Petr^2 Spacek
>>
>>>
>>> Giulio
>>>
>>> Il 10/03/2016 13:23, Justin Stephenson ha scritto:
>>>> Hello,
>>>>
>>>> Are you looking for this? This leverages the AD trust to allow samba
>>>> within IPA to resolve AD users from a trusted AD domain/forest
>>>>
>>>>         *Howto/Integrating a Samba File Server With IPA*
>>>>
>>>>
>>>> http://www.freeipa.org/page/Howto/Integrating_a_Samba_File_Server_With_IPA
>>>>
>>>>
>>>> -Justin
>>>>
>>>> On 03/10/2016 06:29 AM, Giulio Casella wrote:
>>>>> Hi guys,
>>>>> I've got a FreeIPA domain up and running, with a nfs server, joined to
>>>>> IPA domain, offering user's home directories.
>>>>>
>>>>> I'd like to give users on Windows 7 PC (not joined to the same domain)
>>>>> the ability to mount those home directories via samba (entering
>>>>> credentials, not kerberos, being different domains).
>>>>>
>>>>> How can I configure samba to use IPA kerberos authentication
>>>>> authentication to offer access to home directories?
>>>>>
>>>>> I know this could be configured more as a samba question, but I hope
>>>>> someone in this list already faced my scenario.
>>>>>
>>>>> Thanks in advance,
>>>>> Giulio
>>>>>
>>>>
>>>
>>
>>
>> --
>> Petr^2 Spacek
>>
>> --
>> Manage your subscription for the Freeipa-users mailing list:
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Go to http://freeipa.org for more info on the project
> 


-- 
Petr^2 Spacek