[Freeipa-users] Is WinSync A Bad Choice?

[Jakub Hrozek]

On Wed, Feb 01, 2017 at 03:00:55PM -0600, Jason B. Nance wrote:
> Hello everyone,
> 
> I'm about to deploy a fresh IPA domain that needs to integrate with Active Directory.  In my lab environment I've setup a trust with AD and the following items are driving me away from using the trust:
> 
>     - Users can't login to a Linux box using just "username" (user at ad.domain is used)

In the current version you can use the 'default_domain_suffix' option in
sssd.conf on the clients. In RHEL-7.4 we are looking into making this
limitation go away.

(I won't reply to the other two questions because they are outside my
knowledge domain, sorry)