[Freeipa-users] What id my AD domain user password not available

[Martin Kosek]

On 05/23/2016 03:20 PM, Ben .T.George wrote:
> Hi
> 
> Thanks for your reply.
> 
> I saw this before but the thing is i cant able to follow up this one as i am not 
> completely getting those steps
> 
> ipa trust-add --type=ad "ad_domain" --trust-secret
> 
> Is asking for key and what i need to gave ?
> 
> And the shown gif screens and current AD windows are different for me.

Hi,

Try checking the procedure in the guide:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/creating-trusts.html#create-trust-shared-secret
Maybe it will help you understand what needs to be clicked on AD side.

HTH,
Martin

> Regards
> Ben
> 
> On 23 May 2016 16:13, "Martin Babinsky" <mbabinsk at redhat.com 
> <mailto:mbabinsk at redhat.com>> wrote:
> 
>     On 05/23/2016 02:42 PM, Ben .T.George wrote:
> 
>         Hi LIst,
> 
>         my Windows domain Admin is not giving domain admin user password.
> 
>         in this case how can i proceed ipa trust-add
> 
>         regards,
>         Ben
> 
> 
> 
>     Hi Ben,
> 
>     You can ask your AD domain admin to create a shared secret for establishing
>     trust. See the corresponding chapter in the guide for creating trusts[1] for
>     more details.
> 
>     [1]
>     http://www.freeipa.org/page/Active_Directory_trust_setup#When_AD_administrator_credentials_aren.27t_available
> 
> 
>     -- 
>     Martin^3 Babinsky
> 
> 
>